Compliance Radar · Privacy and consent
California's DROP platform: data brokers must process one-stop deletion requests from August 1, 2026
One request now reaches every registered data broker in California.
- Status
- Live: 300,000+ sign-ups, 581 brokers (June 2026)
- Takes effect
- August 1, 2026, every 45 days; every 30 days from January 1, 2027
- Announced
- SB 362, 2023; DROP opened January 1, 2026
- Type
- rule
What changed
One request reaches every registered broker, which must delete matching records and report status. Penalties: $200 a day per unprocessed request, or for not registering.
Who it affects
Data brokers selling data on consumers they don't deal with directly. Registration: $6,000 in 2026.
What to do
- Check whether selling lead lists makes you a broker.
- If so, register and process requests on schedule.
- Buying broker data? Expect fewer California records.
Sources
- CalPrivacy: Data brokers and DROP obligations (opens in a new tab)
- CalPrivacy: DROP launch (January 2026) (opens in a new tab)
- CalPrivacy: 300,000 sign-ups (June 2026) (opens in a new tab)
Summary of public sources, not legal advice.