California's DROP: One Click Deletes Your Data From Every Broker
The Delete Request and Opt-out Platform (DROP) is a once-in-a-generation privacy law. Starting August 1, 2026, California residents can delete their personal data from all 545+ registered data brokers with a single request. Here's what you need to know.
Delete Act Signed
SB 362 passed. CPPA directed to build accessible deletion mechanism.
Regulations Finalized
DROP regulations effective. Brokers must register and create accounts.
DROP Goes Live
Brokers must begin processing deletion requests. Every 45 days thereafter.
How DROP Works
One Request, All Brokers
Submit a single deletion request through the CPPA's DROP portal. The state verifies your California residency and distributes your request to every registered data broker — currently 545+ companies.
Mandatory Compliance
Brokers must download deletion lists every 45 days and process every request. They must delete all associated personal information and report back on the status of each request.
Hashed Identifiers
Your personal identifiers are hashed before distribution. Brokers match against their own hashed records. Privacy-preserving by design.
Authorized Agents Allowed
You don't have to submit yourself. Privacy Sweep acts as your authorized agent — we handle the DROP submission, track compliance, and re-submit every 45 days.
What This Changes
Before DROP
- ✗Manually find each broker's opt-out page
- ✗Navigate broken links and dead forms
- ✗Fill out different forms for each broker
- ✗Handle email verification for each one
- ✗Track which brokers you've done
- ✗Repeat quarterly as data re-appears
With DROP
- One request. All 545+ brokers.
- State handles distribution and verification
- Standardized hashed identifier matching
- Brokers must respond within 45 days
- Automated compliance tracking via DROP API
- Privacy Sweep re-submits every 45 days for you
What DROP Doesn't Cover
- DROP only covers registered California data brokers — it doesn't reach unregistered brokers, national people-search sites that aren't CA-registered, or international brokers.
- Re-listing is still a problem. Brokers re-acquire data from public records. DROP requests must be re-submitted every 45 days. Privacy Sweep automates this.
- DROP is California-only. Residents of other states can't use DROP directly — but our automated removal engine covers brokers nationally.
- Verification takes time. The state must verify your CA residency before your request is distributed. Allow 1-2 weeks for initial verification.
Ready for August 1?
Join the waitlist. We'll submit your DROP request on Day 1 — and every 45 days after that. Founding members get 40% off.