TL;DR: California’s Delete Request and Opt-out Platform (DROP) launched on January 1, 2026. It lets California residents send one free request asking more than 600 registered data brokers to delete their personal information and stop selling it. Since August 1, 2026, brokers must check DROP at least every 45 days and process requests; initial processing cycles were due to finish around November 2026. Status updates can take up to 90 days to appear.
What DROP is
For years, removing yourself from data brokers meant visiting site after site, one opt-out form at a time (see our broker-by-broker list to feel the pain). California’s Delete Act changed that. According to the state’s DROP page, DROP is a single request that goes to every data broker registered with the state, over 600 of them, asking them to delete your personal information and stop selling it.
It’s free. It’s run by the state. And it’s the closest thing America has to a “delete me everywhere” button, at least if you live in California.
Key dates
| Date | What happens |
|---|---|
| January 1, 2026 | DROP opens to consumers |
| August 1, 2026 | Brokers must check DROP at least every 45 days and start processing deletions |
| November 2026 | Brokers expected to finish their initial download and processing cycle |
Status updates inside DROP can take up to 90 days to appear, and timing varies by broker. Malwarebytes notes brokers have 90 days to delete a person’s records after a request.
How to use it
- Verify you’re a California resident through the California Identity Gateway (no account needed there). You can also confirm residency by logging in with Login.gov.
- Create a profile with basic details: name, address and at least one email address and/or mobile number. More detail helps brokers match your records.
- Submit your request. You’ll get a DROP ID to check status later.
You can also submit for another California resident, such as a parent filing for a child.
Tip: add old email addresses and phone numbers too. Brokers match on what they have, and what they have is often from 2014.
What DROP doesn’t do
- It only covers registered data brokers. Companies you deal with directly (your bank, your shop) aren’t “data brokers” under the law; use their own privacy requests.
- It doesn’t scrub Google search results instantly; use Google’s Results About You for that.
- It doesn’t help people outside California. Oregon, Texas and Vermont require broker registration but have no central platform, per Malwarebytes. Other states rely on individual opt-out rights.
Not in California?
You’ll still need to opt out site by site. Start with the biggest people-search sites: Whitepages, Spokeo, TruePeopleSearch and the PeopleConnect sites.
Brokers aren’t the only leak
DROP handles data that’s sold. Breaches handle data that’s stolen. A free email exposure check shows which breaches include your email.
Frequently Asked Questions
What is California DROP?
The Delete Request and Opt-out Platform, a free state tool that sends one deletion and opt-out request to every registered data broker.
Who can use DROP?
California residents, verified through the California Identity Gateway or Login.gov. You can also file for another California resident such as a child.
When do brokers have to act?
From August 1, 2026, brokers must check DROP at least every 45 days and process deletion requests.
How many brokers does DROP cover?
Over 600 data brokers registered with California.
Sources
- California Privacy Protection Agency: Delete Request and Opt-out Platform (DROP)
- Malwarebytes: Californians can tell data brokers to DROP their information (Aug 2026)
- Optery: California DROP overview