TL;DR: California's Delete Request and Opt-Out Platform (DROP) launched January 1, 2026. In seven weeks, 215,000+ Californians signed up. One form. 500+ data brokers. Your information gets deleted from all of them. Starting August 1, 2026, brokers must process these requests within 90 days or face $200/day penalties. CalPrivacy isn't waiting: they've already fined companies over $100,000 for dodging registration. This is the most powerful data deletion tool in the US, and it actually works.

The Numbers

Seven weeks. That's how long it took for 215,000 Californians to say "delete my data" [1].

Before DROP, getting your information removed from data brokers meant:

  • Hunting down hundreds of companies individually
  • Finding opt-out forms that some brokers deliberately hide from search results
  • Filling out separate requests for each one
  • Hoping they actually comply
  • Repeating the whole process when new brokers scrape your data

Now? One form. 500+ registered brokers. Done.

Governor Newsom put it simply: "Your data should belong to you, and DROP will make that happen in one simple step" [1].

How DROP Actually Works

The process takes about five minutes:

  1. Verify California residency (you need to prove you live in California)
  2. Create your profile (name, email, phone, zip code)
  3. Add optional identifiers (mobile advertising IDs, vehicle VINs, smart TV identifiers help match more records)
  4. Submit (one button sends deletion requests to every registered broker)

That's it. The state handles distribution. Every 45 days, brokers must check DROP for new requests and process them within 90 days [2].

Senator Josh Becker, who wrote the Delete Act: "I wrote this bill to give people real control over their personal information and protect them from scams, identity theft, and spam emails" [1].

The Timeline

Here's what's happening:

  • January 1, 2026: DROP went live. Californians started submitting requests immediately.
  • January 20, 2026: 155,000+ signups announced. Newsom holds press event.
  • August 1, 2026: The hammer drops. Data brokers must start processing deletion requests. 90 days to comply. $200/day penalties for failures [2][3].

Right now, brokers are registering, setting up systems, and watching CalPrivacy fine companies that try to dodge. The smart ones are preparing. The stubborn ones are getting caught.

CalPrivacy Isn't Messing Around

The California Privacy Protection Agency has been cracking down since before DROP launched. The Data Broker Enforcement Strike Force is hunting companies that skip registration.

Recent fines:

  • S&P Global: $62,600 for failing to register as a data broker. They blamed an "administrative error." CalPrivacy didn't care [4].
  • Rickenbacher Data (Datamasters): $45,000. This Texas company was selling lists of people with Alzheimer's disease, drug addiction, and bladder incontinence, without registering. CalPrivacy ordered them to stop selling Californians' data entirely [4].
  • ROR Partners: $56,600 for building profiles on 262 million Americans without registering [5].
  • Background Alert: Settlement requiring shutdown of data broker operations through 2028 [5].

Over ten additional enforcement actions are pending against unregistered brokers [4]. The message is clear: register or get caught.

What These Companies Actually Have on You

Data brokers collect everything:

  • Names, email addresses, phone numbers, physical addresses
  • Web browsing history from tracking cookies and data partnerships
  • Purchase history from loyalty cards, credit bureaus, and retailers
  • Location data from apps, cell towers, and connected devices
  • Vehicle information from DMV records and parking apps
  • Health indicators inferred from purchases and app usage
  • Demographic profiles including estimated income, political leanings, family status

Companies like Datamasters were selling lists of people with specific medical conditions. That's who DROP is designed to stop.

What You Should Do

If You Live in California

Go to privacy.ca.gov/drop right now. Submit your deletion request. Add as many identifiers as you can (mobile advertising ID, vehicle VIN, smart TV IDs) to maximize matching. Set a reminder to re-submit periodically as new brokers register.

If You Don't Live in California

Use services like DeleteMe or manually opt out from major brokers. Push your state legislators to pass similar laws. Texas and Oregon have registries but no unified portal. California writes the rules other states copy.

Either Way: Start Now

Major data brokers have opt-out pages today: Spokeo, BeenVerified, WhitePages, Intelius, PeopleFinder. Every deletion now is one less profile to deal with later. Check our opt-out guides for step-by-step instructions.

Why This Matters

Data brokers fought the Delete Act. They lobbied against it. They claimed compliance was impossible. They lost.

Now they're paying registration fees that fund DROP, the tool that undermines their business model. 215,000 people used it in seven weeks. That number will grow.

When August hits, every registered broker must process deletion requests or face daily fines. CalPrivacy is already proving it will enforce. The companies that made billions selling your information are watching their California pipeline get cut.

This is rare. A privacy tool that actually works. A state agency that actually enforces. A system where the burden finally shifts from consumers to companies.

If you're in California, use it. If you're not, watch this model spread.

References

  1. StateScoop: Californians begin using 'DROP' tool, asking data brokers to delete their personal data (February 2026)
  2. CalMatters: How Californians can delete their information from data brokers (January 2026)
  3. California Privacy Protection Agency: About DROP and the Delete Act
  4. CalPrivacy: CalPrivacy Brings New Round of Enforcement Actions Against Data Brokers (January 8, 2026)
  5. CalPrivacy: CalPrivacy Fines Marketing Firm for Selling Custom Audiences Without Data Broker Registration (December 3, 2025)