About DROP and the Delete Act
DROP allows California residents to have more control over their personal information.
Learn about the Delete Act that started DROP.
What the Delete Act means for you
Through DROP, the Delete Act lets you:
- Delete the information data brokers have about you
- Control the sale of your personal information
DROP puts the Delete Act into action.
Why it’s important
DROP is the first of its kind. It allows consumers to request the deletion of their data from over 500 data brokers — all in one request.
California is:
- the first in the world to provide this platform.
- one of four states (also Oregon, Texas, and Vermont) who require data broker registration.
About the Delete Act
The California Consumer Privacy Act (CCPA) established privacy rights for Californians in 2018.
The Delete Act expands privacy rights for Californians. Review the privacy law timeline for more details.
In 2023, the Legislature passed the Delete Act (Senate Bill 362, Chapter 709, Statutes of 2023).
Requirements
CalPrivacy must create a platform that:
- Allows consumers to submit a request to delete their personal information
- Provides these requests to all registered data brokers
- Is free and easy to access on their website
DROP is this platform.
Data brokers must:
- Register with CalPrivacy every year
- Process deletion requests submitted through the DROP system
- Report the types of information they collect and share
- Undergo audits to make sure they’re following the Delete Act
Data brokers who fail to comply may face penalties and administrative fines.
Learn more about data brokers.
California privacy law timeline
-
2018
The California Consumer Privacy Act (CCPA) established broad consumer privacy rights for Californians.
-
2019
The first state data broker registration law passed (AB 1202) and created a public registry administered by the Attorney General.
-
2020
Californians passed a ballot measure to expand the CCPA and create CalPrivacy.
-
2023
The Delete Act (SB 362) is signed into law, expanding the 2019 registration law. CalPrivacy starts administering the data broker registry in 2024.
-
2025
The legislature amended the Delete Act with SB 361 to require data brokers to include additional disclosures in the registration process.
-
2026
DROP is available to consumers to submit deletion requests.
Take action
Submit a DROP request or sign up to receive future updates.