Delete Request and Opt-out Platform (DROP) Audits
CalPrivacy is exploring whether to adopt regulations to clarify or further specify the audit requirement for processing deletion requests. The Agency is gathering information and seeking input from stakeholders about this topic.
Preliminary rulemaking activities
April 7, 2026 - Invitation for Preliminary Comments on Proposed Rulemaking
CalPrivacy solicited preliminary written comments related to the requirements for data broker audits from the public via its Invitation for Preliminary Comments – Delete Request and Opt-out Platform (DROP) Audits. The preliminary comment period closed on May 7, 2026.
Information regarding the rulemaking process will be posted to the Laws and regulations page. You can sign up to receive notifications regarding rulemaking activities by selecting “Rulemaking” on our Subscribe page. Please note that comments are public records and will be published on the Agency’s website.