If you live in California, this Saturday you get a button that clears your personal information from every registered data broker in the state at once, with one form. The California Privacy Protection Agency’s Delete Request and Opt-Out Platform, known as DROP, has accepted consumer requests since January. August 1, 2026 is the date it starts having teeth: every registered broker must retrieve requests from DROP at least every 45 days and process them within 45 more.
Data brokers are the companies that quietly stitch together your address history, phone number, driving record, purchases, family relationships, and estimated income, and then sell it. To advertisers. To scam operations that use “your kid’s name and your mother’s maiden name” to sound real. To auto and life insurance underwriters who use those inferences to price you. To people-search sites that put your details in front of anyone who Googles your name. The state’s data-broker registry lists more than 600 companies. Until now, opting out meant filing 600 separate requests in 600 different formats. Nobody actually did that.
Here’s the catch that makes the change real. Non-compliance carries a $200 fine per consumer per day. A broker that ignores 10,000 delete requests for 45 days is on the hook for $90 million. The California Privacy Protection Agency has finally been handed a lever that hurts.
Why care in dollar terms, if you have never worried about privacy for its own sake? Your data is part of the reason your auto insurance quote is not the same as your neighbor’s for the same driving record. It is part of the reason a stranger can call you knowing enough details to sound like your bank. Shrinking the pile shrinks the attack surface. News coverage of the deadline puts the queue at roughly 260,000 consumer delete requests already waiting for August 1. That is the size of the pent-up demand, and the number the fines multiply against.
Do this on Saturday, or any time next week.
Go to cppa.ca.gov and create a DROP account. Submit one verified delete request. It applies to every registered broker in the state at once. The verification step confirms you are you, so a broker cannot legally duck out for lack of ID. If a broker somehow cannot verify you, the law forces them to treat the request as an opt-out of sale instead. Either way, your data stops moving.
Three carve-outs to know before you get your hopes up. The Delete Act does not touch consumer reporting agencies covered by the federal Fair Credit Reporting Act. Translation: your Experian, Equifax, and TransUnion credit files stay put. Those you fix through the CFPB complaint portal, separately. HIPAA-covered health records are exempt. Bank, brokerage, and other Gramm-Leach-Bliley-covered files are exempt. Everything else, from people-search sites to marketing lists to the inference brokers that quietly feed insurance and lending, is fair game.
If you don’t live in California, this one is not yours to use. Texas, Oregon, and Vermont have broker registries but no equivalent one-shot deletion platform. File this away. If California’s version works, expect four or five other states to copy it in 2027.
For Californians, this is the one privacy button worth pressing in a year of privacy fatigue. Twenty minutes on Saturday, hundreds of brokers cleared, real money on the other side in what you don’t get quoted and don’t get scammed for. Move.
How Candid Yak makes money. Some of the products we write about pay us if you apply or sign up through our links. That never changes our verdict, our rankings, or the numbers in this article. We call a bad deal a bad deal whether it pays us or not. Some brands shown in our comparison tools are placeholder examples while we finalize partner agreements, and we label them as such.
Sources
- DROP overview and August 1 timeline (California Privacy Protection Agency)
- California Approves Delete Act Regulations (CPPA announcement)
- DROP Is Coming Due: What California's Delete Act Means for Data Brokers in August (Alston & Bird, 2026)
- California Data Broker Registry (Office of the Attorney General)
- California DROP Enforcement Hits Aug. 1: Data Brokers Face $200-Per-Day Fines (TechTimes, July 8, 2026)