California Delete Act DROP: The State's Delete Request and Opt-Out Platform

For years, getting your personal information off data broker websites meant visiting dozens — sometimes hundreds — of sites one by one, finding each one's opt-out form, and filling it out by hand. Researchers at Consumer Reports put the total manual effort at 304+ hours. Nobody has that kind of time.

California decided to build a shortcut. It's called DROP — the Delete Request and Opt-Out Platform — and it went live on January 1, 2026. It's the centerpiece of California's Delete Act, and it's the single most important development in consumer data-broker deletion in years. Here's what it is, who can use it, how it works, and — because honesty is the whole point of this site — what it can't do.

What DROP Actually Is

DROP is a government-run platform where a California resident can submit one deletion request and have it flow through to the data brokers registered in the state. Instead of you chasing each broker down, the platform creates a queue: brokers registered with California's privacy regulator pull the queue of deletion requests and are required to process them.

The key detail that gives DROP its power: brokers must pull and process the queue every 45 days. That turns deletion from a one-time favor each broker does at its own pace into a repeating obligation on a fixed cycle. Your request doesn't go into a void — it goes into a queue the brokers are legally required to check.

The adoption numbers tell you how badly people wanted this. More than 500,000 Californians have signed up. That's half a million people who, before DROP existed, would each have faced those 304+ hours of manual opt-out work. The demand was never the question — access was.

Who Is Eligible

DROP is for California residents. The Delete Act is a California law, and the platform verifies that you're a California resident before processing your request. That generally means you live in California now — not that you once lived there, and not that you plan to move there.

If you split your time between states, the honest answer is that eligibility follows residency as the law defines it, and border cases aren't always clean. When in doubt, submitting with accurate information and letting the platform's verification process do its job is the straightforward approach.

If you're not a California resident, DROP isn't available to you — but keep reading. The last section of this article covers exactly what to do instead, and it's not nothing.

Step-by-Step: Signing Up for DROP

The regulator's website is the starting point (the California Privacy Protection Agency's site at cppa.ca.gov is where official information about the platform lives). Here's the general process:

1. Find the DROP portal. From the California Privacy Protection Agency's website, navigate to the Delete Act / DROP section. Because this is a government platform, start from the regulator's site directly rather than clicking links from email or ads — there are already lookalike pages trying to harvest personal details from people searching for DROP.
2. Verify you are a California resident. The platform asks for information to confirm residency. Provide it accurately. Government deletion requests attached to false information help no one, and accuracy matters because your request has to match you in brokers' databases.
3. Submit your deletion request. This is the "one request" part. You file a single request through DROP rather than hunting down each registered broker's individual opt-out page. The request enters the queue that brokers pull from.
4. Wait for the 45-day cycle. Registered brokers must pull the queue and process deletion requests every 45 days. You won't see results overnight — the mechanism is deliberately built on this cycle. Mark your calendar for roughly 6–8 weeks out and check back.
5. Confirm and re-check. After the cycle completes, spot-check a few known data broker sites for your listings. Search your name, phone number, and address on the big brokers and confirm they're gone. And remember the permanent rule of data deletion: re-check every 3–6 months. Brokers refresh their records from public sources, so listings can reappear.

DROP Has Teeth: Real Enforcement

A deletion platform without enforcement is just a suggestion box. California has been putting money behind the Delete Act, and the enforcement actions are public proof that noncompliance costs real dollars:

• LocateSmarter — $116,490 (August 2026). Fined for Delete Act violations, one of the first major enforcement actions showing the state will penalize brokers that don't play by the new rules.
• SalesIntel — $36,400 (September 2026). Another Delete Act enforcement action, coming just a month later — a signal that the LocateSmarter fine wasn't a one-off.

These matter for two reasons. First, they tell brokers that ignoring the DROP queue has a price tag. Second, they tell you that your request is backed by a regulator with a track record of following through. The Consumer Reports coverage of the Delete Act's rollout has been tracking this enforcement arc — worth following at consumerreports.org for ongoing updates.

The Honest Limitations

This is where DIY Deletion differs from the sales pitches. DROP is powerful, but it's not magic. Understand its limits before you set expectations:

• It doesn't cover every broker. DROP reaches brokers registered in California. The data broker industry is enormous and fragmented — thousands of companies buy and sell personal data, and no single platform reaches all of them. The worst offenders you see when you Google yourself (the big people-search sites) are generally in scope, but the long tail isn't.
• It doesn't stop public records. Brokers rebuild their databases from public records: property deeds, voter registrations, court filings, marriage licenses. As long as those records exist and are accessible, a determined broker can reconstruct a profile. DROP deletes what brokers hold; it can't seal public records.
• Deletion isn't permanent by default. Because brokers refresh from public sources, listings can reappear months later. The 45-day queue cycle helps — your request keeps cycling through — but the re-check habit every 3–6 months is still yours to keep.
• It doesn't cover everything data brokers do. Some broker activity falls under other laws and exemptions (the FTC's consumer protection work at ftc.gov is a good window into the broader regulatory picture). DROP is a deletion mechanism, not a complete privacy shield.

None of this makes DROP a bad deal. It's free, it covers the registered-broker universe with one request, and it's backed by real fines. It's simply one strong layer in a system that needs several. The rest of that system is the DIY work this site walks you through: per-broker opt-outs for the big people-search sites, Google's own removal tools, and a maintenance schedule.

Not a Californian? Here's What to Do Instead

If DROP isn't available to you, you're not out of options — you're just on the manual track, which is exactly what this site exists for.

Start with the DIY broker hit-list method. Consumer Reports' research found that DIY deletion removed roughly 70% of listings, versus about 35% for paid services (DeleteMe managed just 27% in the same study). The paid services charge $129 a year for results you can beat yourself with a prioritized system. Our guide to removing your personal information from the internet lays out the full method: which brokers to hit first, the order that matters, and how to track what's done.

Hit the big people-search sites directly. The sites that show up when someone Googles your name — Spokeo, WhitePages, BeenVerified, Intelius and their network siblings — each have opt-out processes you can complete in minutes per site. One evening of focused work clears the brokers that matter most for your visible footprint.

Use Google's own tools. Google expanded its "Results about you" removal tool in February 2026, making it easier to request removal of personal contact information from search results. Details in our walkthrough of Google's Results about you tool.

Watch your state. California isn't the only game in town. Connecticut's data broker registration requirement starts January 1, 2027, and other states are moving in the same direction. The regulatory map is shifting toward the consumer — DROP is the first platform of its kind, and it likely won't be the last.

Cut off the phone channel. Data brokers feed the spam-call ecosystem. While you're doing deletion work, lock down the inbound side too — our guide to stopping spam calls and robocalls covers the practical steps.

---

FAQ: California Delete Act DROP

Is DROP really free?

Yes. It's a government-run platform created under California's Delete Act. There is no fee to submit a deletion request. Any site charging you for "DROP access" or "DROP filing" is not the real thing.

How long does it take to see results from DROP?

Registered brokers must pull and process the deletion queue every 45 days, so expect roughly 6–8 weeks before your request has fully cycled through. Some brokers may process faster; the 45-day rule is the backstop, not the promise.

Does DROP delete me from every data broker?

No. It covers brokers registered in California — a large and important set, including most of the big people-search sites, but not the entire industry. The long tail of smaller brokers still needs individual opt-out requests.

Will my information stay deleted after DROP processes my request?

Not necessarily, and this is the honest part: data brokers rebuild profiles from public records, so listings can reappear over time. Re-check your footprint every 3–6 months and re-submit opt-outs where listings return. Maintenance is forever.

Can I use DROP if I moved out of California?

DROP is for California residents. If you've moved away, eligibility follows current residency. Former residents should use the per-broker DIY opt-out process instead — which, per the Consumer Reports findings, removes about 70% of listings when done thoroughly.

What happens if a broker ignores my DROP request?

That's what enforcement is for. California has fined brokers for Delete Act violations — LocateSmarter paid $116,490 in August 2026 and SalesIntel paid $36,400 in September 2026. The fines are the mechanism that makes the 45-day queue rule real.