Submit a privacy request

On this page

• • Why submit a request
  • Who must comply
  • How to submit a request
  • Delete Request and Opt-out Platform (DROP)

As a Californian, you have the strongest privacy rights in the country. The California Consumer Privacy Act (CCPA) gives you rights over your data. You can see what information businesses collect about you. You can ask them to stop selling or sharing your data without your permission. You can also order them to delete the information they have collected from you. Submitting a privacy request gives you back control over your personal information. 

Businesses that are subject to the CCPA must honor your privacy choices. Once you submit a request, the business has to follow your orders. Sometimes, the business may need to verify that you are who you say you are to complete your request. They also must tell the service providers or third parties about your request with whom they’ve shared your information, so they can follow it too. However, you still have to submit a separate request to each business you have provided your personal information to.  

There are some businesses you’ve never intentionally interacted with but still collect and sell large amounts of information about you. These businesses are known as data brokers. Data brokers collect information from many different sources. You can view a list of all data brokers registered with the Agency. You can submit requests directly to those businesses, subject to some exceptions. Learn more about how we’re making it easier to submit privacy requests to data brokers below.  

• 1. Select a business and find out how to contact them about your privacy 

     Find the company’s privacy policy. You can also look for a link called “Privacy Policy”, “Do not sell or share my personal information”, “Your CA Privacy Choices”, or something similar. This is often located at the bottom or top of a website. Once on that page, you can find information about how to exercise your privacy rights.  

  2. Submit your request

     You can usually send this through a web form, email, or by calling a toll-free number listed on the website’s privacy policy. You can decide which privacy rights you’d like to exercise when filling out the request. 

  3. Prove it’s really you

     You may need to provide your name, email, or other details. You only need to provide the information they need to complete your request. If you think a business is asking for more information than they really need to verify who you are, you can submit a complaint to us. 

  4. Wait for their response

     Businesses should respond within 45 days. They may contact you if they need more time to complete your request.  

  5. Submit a complaint, if needed

     If a business ignores your request or you think the business didn’t follow the law, you can file a complaint with us. 

There are many companies that buy and sell your data. Submitting requests to hundreds of businesses can seem like a huge task. That’s why we’re working hard to make it easier. 

The California Privacy Protection Agency will launch the Delete Request and Opt-out Platform (DROP) in 2026. DROP will be a one-stop-shop where you can submit a single request to delete your data with all data brokers registered with the Agency. You will no longer have to submit and keep track of hundreds of requests. It will also make it easier for data brokers to comply with your requests. 

For now, you can find all data brokers listed on the Agency’s Data Broker Registry and submit your privacy requests to them directly. If you don’t hear back from them, or you believe they violated the law, let us know by submitting a complaint.