About DROP and the Delete Act

DROP allows California residents to have more control over their personal information.

Learn about the Delete Act that started DROP.

What the Delete Act means for you

Through DROP, the Delete Act lets you:

  • Delete the information data brokers have about you
  • Control the sale of your personal information

DROP puts the Delete Act into action.

Why it’s important

DROP is the first of its kind. It allows consumers to request the deletion of their data from over 500 data brokers — all in one request.

California is:

  • the first in the world to provide this platform.
  • one of four states (also Oregon, Texas, and Vermont) who require data broker registration.

About the Delete Act

The California Consumer Privacy Act (CCPA) established privacy rights for Californians in 2018.

The Delete Act expands privacy rights for Californians. Review the privacy law timeline for more details.

In 2023, the Legislature passed the Delete Act (Senate Bill 362, Chapter 709, Statutes of 2023).

Requirements

CalPrivacy must create a platform that:

  • Allows consumers to submit a request to delete their personal information
  • Provides these requests to all registered data brokers
  • Is free and easy to access on their website

DROP is this platform.

Data brokers must:

  • Register with CalPrivacy every year
  • Process deletion requests submitted through the DROP system
  • Report the types of information they collect and share
  • Undergo audits to make sure they’re following the Delete Act

Data brokers who fail to comply may face penalties and administrative fines.

Learn more about data brokers.

California privacy law timeline

  •  

    2018

    The California Consumer Privacy Act (CCPA) established broad consumer privacy rights for Californians.

  •  

    2019

    The first state data broker registration law passed (AB 1202) and created a public registry administered by the Attorney General.

  •  

    2020

    Californians passed a ballot measure to expand the CCPA and create CalPrivacy.

  •  

    2023

    The Delete Act (SB 362) is signed into law, expanding the 2019 registration law. CalPrivacy starts administering the data broker registry in 2024.

  •  

    2025

    The legislature amended the Delete Act with SB 361 to require data brokers to include additional disclosures in the registration process.

  •  

    2026

    DROP is available to consumers to submit deletion requests.