Last Update: 04/05/2026 at 2:50 PM EST
California Tightens Data Broker Deletions
Coverage from JD Supra, National Law Review, and others
Articles
12
Latest Article
03/06
Active Days
871
Executive Summary
California is moving DROP into enforcement, forcing registered data brokers to process consumer deletion requests and increasing privacy oversight
- More than 575 data brokers have registered for Californias DROP platform
- DROP went live on January 1 2026 and centralizes deletion requests
- Over 242000 Californians signed up and 18000 requests arrived in 48 hours
- Data brokers must honor deletion requests starting August 1 2026
- Brokers must match identifiers, standardize records, and delete matching data
- Deletion obligations extend to service providers and contractors for matched records
- CalPrivacy created a Data Broker Enforcement Strike Force and added audit capacity
Quick Facts
- What: Moves DROP from launch into enforcement of deletion requests
- Where: California under the Delete Act and DROP platform
- Why: To centralize deletion rights and increase broker accountability
- Who: California Privacy Protection Agency and registered data brokers
- When: Enforcement begins August 1 2026 after January launch
Coverage Timeline: 871 Days
Featured Article
CalPrivacy moves to enforce the California Delete Act Delete Request and Opt-Out Platform in California, beginning enforcement later this year.
Additional Articles
⭐⭐⭐⭐⭐
California Privacy Protection Agency requires data brokers to comply with deletion requests via DROP starting August 1 2026 in California.
California Privacy Protection Agency launches the Delete Request and Opt-out Platform to centralize deletion requests from data brokers registered in California on January 1, 2026.
Data brokers must comply with California DROP obligations beginning in 2026 to govern deletion, record matching, and service provider contracts.
CalPrivacy Executive Director Tom Kemp detailed in California how the DROP deletion platform, new audit division, and phased risk assessments will reinforce CCPA enforcement against data brokers and businesses starting in 2026.
The California Privacy Protection Agency adopted Delete Act broker regulations on Nov. 8, 2024, in Sacramento, expanding broker definitions, increasing fees, and mandating a state opt-out deletion platform.
The California Privacy Protection Agency ordered data broker Background Alert to shut down for three years in 2024 after noncompliance with California Delete Act registration requirements.
California state government enacted Senate Bill 362 on October 10 2023 to create a one stop deletion mechanism for data brokers.
⭐⭐⭐
CalPrivacy Director Tom Kemp announced California's DROP deletion platform and new audit division on behalf of the California agency in 2026 to enforce CCPA compliance across the state.
California residents enroll in DROP to delete personal data from data brokers in California, with enforcement starting in August 2026.
CPPA establishes data broker enforcement strike force in California to enforce Delete Act beginning 2024, with DROP platform launching in 2026.
California's DROP platform allows residents to submit a single deletion request to data brokers, aligning CCPA with GDPR-style rights while enforcement remains critical.