Free to compare · No sign-up
How it worksAd disclosure
Article

If You Live in California, One Form Clears Your Data From 600 Brokers Starting Saturday.

California's Delete Request and Opt-Out Platform hits its enforcement date August 1, 2026. Every registered data broker must start processing DROP requests or eat a $200-per-consumer-per-day fine. This is the one privacy button worth pressing this year, if you live in the state.

Aerial view of the California State Capitol building in Sacramento

If you live in California, this Saturday you get a button that clears your personal information from every registered data broker in the state at once, with one form. The California Privacy Protection Agency’s Delete Request and Opt-Out Platform, known as DROP, has accepted consumer requests since January. August 1, 2026 is the date it starts having teeth: every registered broker must retrieve requests from DROP at least every 45 days and process them within 45 more.

Data brokers are the companies that quietly stitch together your address history, phone number, driving record, purchases, family relationships, and estimated income, and then sell it. To advertisers. To scam operations that use “your kid’s name and your mother’s maiden name” to sound real. To auto and life insurance underwriters who use those inferences to price you. To people-search sites that put your details in front of anyone who Googles your name. The state’s data-broker registry lists more than 600 companies. Until now, opting out meant filing 600 separate requests in 600 different formats. Nobody actually did that.

Here’s the catch that makes the change real. Non-compliance carries a $200 fine per consumer per day. A broker that ignores 10,000 delete requests for 45 days is on the hook for $90 million. The California Privacy Protection Agency has finally been handed a lever that hurts.

Why care in dollar terms, if you have never worried about privacy for its own sake? Your data is part of the reason your auto insurance quote is not the same as your neighbor’s for the same driving record. It is part of the reason a stranger can call you knowing enough details to sound like your bank. Shrinking the pile shrinks the attack surface. News coverage of the deadline puts the queue at roughly 260,000 consumer delete requests already waiting for August 1. That is the size of the pent-up demand, and the number the fines multiply against.

Do this on Saturday, or any time next week.

Go to cppa.ca.gov and create a DROP account. Submit one verified delete request. It applies to every registered broker in the state at once. The verification step confirms you are you, so a broker cannot legally duck out for lack of ID. If a broker somehow cannot verify you, the law forces them to treat the request as an opt-out of sale instead. Either way, your data stops moving.

Three carve-outs to know before you get your hopes up. The Delete Act does not touch consumer reporting agencies covered by the federal Fair Credit Reporting Act. Translation: your Experian, Equifax, and TransUnion credit files stay put. Those you fix through the CFPB complaint portal, separately. HIPAA-covered health records are exempt. Bank, brokerage, and other Gramm-Leach-Bliley-covered files are exempt. Everything else, from people-search sites to marketing lists to the inference brokers that quietly feed insurance and lending, is fair game.

If you don’t live in California, this one is not yours to use. Texas, Oregon, and Vermont have broker registries but no equivalent one-shot deletion platform. File this away. If California’s version works, expect four or five other states to copy it in 2027.

For Californians, this is the one privacy button worth pressing in a year of privacy fatigue. Twenty minutes on Saturday, hundreds of brokers cleared, real money on the other side in what you don’t get quoted and don’t get scammed for. Move.

How Candid Yak makes money. Some of the products we write about pay us if you apply or sign up through our links. That never changes our verdict, our rankings, or the numbers in this article. We call a bad deal a bad deal whether it pays us or not. Some brands shown in our comparison tools are placeholder examples while we finalize partner agreements, and we label them as such.

Frequently asked questions

What is DROP and when does it start working?

DROP is the California Privacy Protection Agency's Delete Request and Opt-Out Platform. It has accepted consumer delete requests since January 2026, but August 1, 2026 is the date registered data brokers must start pulling those requests off the platform and processing them. Before Saturday the requests were queued. From Saturday they have legal teeth.

Do I have to live in California to use DROP?

Yes. The Delete Act is a California statute and DROP only routes requests to brokers registered with the California Privacy Protection Agency. Texas, Oregon, and Vermont have data broker registries, but none of them offer a one-shot deletion platform of this kind.

Which of my records does DROP not touch?

Three big carve-outs. Credit files at Experian, Equifax, and TransUnion are covered by the federal Fair Credit Reporting Act, not the Delete Act. HIPAA-covered medical records are exempt. And banks, credit unions, and other institutions covered by the Gramm-Leach-Bliley Act are exempt. Marketing databases, people search sites, and inference brokers that feed insurance underwriting are in scope.

Keep reading

More guides, explained plainly.

Plain-English guides on the money decisions that matter.