The Era of Centralized Deletion Is Here: Understanding CalPrivacy’s DROP Platform Before 2026
Key Takeaways: California’s Delete Request and Opt-Out Platform (DROP) is now finalized and will launch January 1, 2026, enabling consumers to submit a single, authenticated deletion request to all registered data brokers. Data brokers face significant new operational obligations starting August 1, 2026, including mandatory DROP integration, retrieval of requests at least every 45 days, 90-day determination deadlines, and suppression list requirements. Noncompliance can result in penalties of $200 per request, per day. DROP operationalizes the Delete Act and expands consumer privacy rights, requiring data brokers to overhaul how they identify, match, store, and delete personal information, including in situations where they may not traditionally view themselves as data brokers. At the November 7, 2025 Board meeting for the California Privacy Protection Agency, which recently adopted the public-facing shorthand “ CalPrivacy ,” Board Member Jennifer Urban described the state’...