California DROP Law: Your New Right to Mass-Delete Your Data

Quick Answer: The DROP law lets California residents submit one request to delete their data from all data brokers at once, through the state's privacy agency. It takes effect August 2026.

California's Delete Request for Online Privacy (DROP) law — passed in 2023, taking effect August 2026 — gives California residents the right to submit a single request to delete their personal information from every registered data broker at once.

📜 SB 362 — Signed 2023
📅 Effective August 2026
🗑️ One request, all brokers
🏛️ State-enforced compliance

What Is the California DROP Law?

The DELETE Act (officially SB 362, also referred to as the DROP law for Delete Request for Online Privacy) was signed by Governor Newsom in October 2023. It represents the most significant expansion of California's data privacy rights since the CCPA.

Before this law, California residents had to contact each data broker individually to request their data be removed — a time-consuming process across hundreds of companies. The DROP law changes that entirely: starting in August 2026, you'll be able to submit a single deletion request through the California Privacy Protection Agency (CPPA), and that agency will relay it to all registered data brokers in the state.

Quick version: Instead of opting out of 200+ brokers one by one, California residents can submit one request through a state portal and have it sent to every registered broker automatically.

What the DROP Law Does

Who Qualifies?

The DROP law applies to California residents. You must be a current resident of California to use the state's deletion portal.

Data brokers covered are those that: collect and sell the personal information of California residents, have annual gross revenues exceeding $25 million, or buy and sell personal data for commercial purposes at significant volume.

How It Works — Step by Step

  1. California builds the portal (by August 2026) The California Privacy Protection Agency is required to have the deletion request portal operational by August 1, 2026. The agency is currently developing this system.
  2. You submit one deletion request Visit the CPPA portal, verify your identity as a California resident, and submit your deletion request. No need to know which specific brokers have your data.
  3. The CPPA relays your request to all registered brokers The state agency forwards your request to every data broker registered in California — currently hundreds of companies.
  4. Brokers must comply within 31 days Data brokers are legally required to delete your information within 31 days of receiving the request. They must confirm compliance back to the CPPA.
  5. Non-compliant brokers face CPPA enforcement The CPPA can audit broker compliance and impose fines. Penalties can reach $200 per intentional violation — which adds up quickly across thousands of records.
Note: The CPPA deletion portal is not live yet. It is expected to launch by August 1, 2026. Until then, California residents must use manual opt-outs or paid removal services.

What Brokers Must Do

Under the DROP law, data brokers are required to:

What If You're NOT in California?

The DROP law only applies to California residents. If you live elsewhere in the US, you don't have access to this centralized deletion mechanism — yet.

Several other states are moving in this direction. Virginia, Colorado, Connecticut, and Texas have passed comprehensive privacy laws with opt-out rights, though none yet include a centralized broker deletion portal like California's. Federal legislation has been proposed but has not yet passed.

In the meantime, the best nationwide alternatives are:

Frequently Asked Questions

When does the DROP law take effect?

The California DROP law (SB 362) takes effect August 2026. The California Privacy Protection Agency is required to have the centralized deletion request portal operational by August 1, 2026. The portal is not live yet — until then, California residents must use manual opt-outs or paid removal services.

Does the DROP law apply outside California?

No. The DROP law only applies to California residents. However, other states including Virginia, Colorado, Connecticut, and Texas have passed comprehensive privacy laws with opt-out rights. Similar federal legislation has been proposed but has not yet passed. Non-California residents can use services like Incogni or Optery for automated removal.

How do I use the DROP law?

Starting August 2026, visit the California Privacy Protection Agency (CPPA) portal, verify your identity as a California resident, and submit your deletion request. The CPPA will relay your request to all registered data brokers, who must comply within 31 days. Non-compliant brokers face CPPA enforcement and fines.

Can't Wait for Legislation? Remove Your Data Now →

Services like Incogni handle 180+ data brokers automatically — no waiting for government portals. About $6.49/month.

See the Best Removal Services for 2026 →

Honest comparison — no sponsored rankings.

Related Guides