One-Stop Shop in California to Erase Your Online Data Footprint

Key Points

• Tool Launch: Californians can now utilize the Delete Request and Opt-out Platform (DROP) to manage their personal data.
• Verification Process: Users must verify their California residency to send deletion requests to registered data brokers.
• Annual Registration: Data brokers are mandated to register annually and comply with deletion requests.
• Future Processing: The first deletion requests through DROP will be processed starting August 1, 2026.

Californians can now put a stop to their personal data being sold around on an online trading floor, thanks to a new free tool. On January 1, the state launched its Delete Request and Opt-out Platform, shortened to DROP, that allows residents to request to delete all of their personal information online that’s been harvested by data brokers.

According to the California Privacy Protection Agency (CalPrivacy), which was responsible for DROP’s release, it’s a “first of its kind” tool that imposes new restrictions on businesses that hoard and sell personal info that consumers didn’t provide directly. The process requires verifying your California residency before you can send a “single deletion request to every registered data broker in California.”

On the other end, CalPrivacy will require data brokers to register every year and to process any deletion requests from DROP. Data brokers will also have to report the type of information they collect and share, while also being subject to regular audits that check for compliance. If any data broker is found skirting the requirements, they could face penalties and fines.

Besides being the first in the country to offer this type of comprehensive tool that deletes online personal data, CalPrivacy said it’s one of four states, including Oregon, Texas and Vermont, to require data broker registration. According to the agency, data brokers will start processing the first deletion requests from DROP starting August 1, 2026.