Accessible Deletion Mechanism – Delete Request and Opt–out Platform (“DROP”) System Requirements

In 2023, the Legislature passed the Delete Act (Senate Bill (SB) 362, Chapter 709, Statutes of 2023), which requires the Agency to establish an accessible deletion mechanism that allows consumers to request from registered data brokers the deletion of all non–exempt personal information related to the consumer through a single deletion request to the Agency. On September 26, 2025 the California Privacy Protection Agency adopted regulations on the subject of the Accessible Deletion Mechanism.

Effective Date: January 1, 2026

Status of the Proposal: The rulemaking is complete. On November 6, 2025, the regulations were approved by the Office of Administrative Law and filed with the Secretary of State.

• Notice of Approval
• Approved Regulations Text
• Final Statement of Reasons and Update to Informative Digest
• Final Statement of Reasons – Appendix A (45-Day Comment Summaries and Responses)
• Final Statement of Reasons – Appendix B (15-Day Comment Summaries and Responses)
• Final Economic and Fiscal Impact Statement (STD 399)