California DROP: How the Data Broker Deletion Tool Works
One request, hundreds of brokers. DROP is one of the most useful privacy tools to appear in years, with real limits worth knowing.
By Siddharth ShankarUpdated October 11, 2026DROP, the Delete Request and Opt-out Platform, launched for consumers on January 1, 2026. California residents can file one free request that reaches more than 600 registered data brokers. Brokers must process deletions on a rolling 45-day basis, status updates can take up to 90 days, and you check progress with an eight-digit DROP ID. DROP does not cover non-registered companies and some regulated data is excluded.
Before you start opt-outs, see which known data breaches already include your email.
Free · About 30 seconds · No sign-up · Email not stored
For most of the past decade, removing yourself from data brokers meant visiting dozens of websites one at a time. California changed that with the Delete Act and a tool called DROP. If you live in the state, it is a strong first step.
What DROP is
DROP stands for Delete Request and Opt-out Platform. It is run by the California Privacy Protection Agency. According to the agency, it opened to consumers on January 1, 2026, and a single request can reach more than 600 registered data brokers. It is free.
You must be a California resident to file, and you may file for an eligible relative. You verify your identity through the California Identity Gateway or Login.gov. The agency says DROP does not retain your verification information.
What brokers must do
The agency's explainer says brokers must delete all of your information on a rolling 45-day basis, subject to some exemptions. They must also make sure the information remains deleted should the broker collect it again. From August 1, 2026, brokers must access DROP at least once every 45 days and process deletions.
You only need to submit one request. You can check progress with an eight-digit DROP ID. The agency says status updates can take up to 90 days.
What DROP does not cover
The Electronic Frontier Foundation's July 2026 review and the agency's own materials point to limits:
- Only California residents can use it
- Fully deleted outcomes are not guaranteed. Public records, such as vehicle or real estate ownership, can be exempt
- Brokers can still collect new data about you later
- Companies not on the registry are outside its reach, and the EFF gave Google as an example
- Regulated data is excluded, including information covered by credit reporting rules, financial privacy law, insurance privacy law, California medical privacy law and HIPAA
- Deletion may reduce targeted advertising you see, which some people find inconvenient
The EFF recommends updating your request regularly. We did not find an authoritative statement on how long deletions stay in effect, so we do not claim one.
Removal is one half of the job. Check whether your email has leaked as well.
Free · About 30 seconds · No sign-up · Email not stored
How to use DROP
1Confirm eligibility
You must be a California resident. If you are filing for a relative, check the agency's rules for eligible relatives.
2Verify your identity
Use the California Identity Gateway, or Login.gov if you prefer. No separate account is needed.
3Choose what to submit
Enter the personal information you want deleted, such as names, emails and phone numbers.
4Save your DROP ID
Keep the eight-digit ID. You will use it to check the status of your request.
5Check status and re-run later
Expect updates over weeks. Review results with how to verify a removal actually worked, and update the request when your details change.
What to do alongside DROP
DROP handles registered brokers. It does not replace targeted removal from specific people-search sites, which may or may not be on the registry. Check the broker registry that the agency publishes and keep a list of any sites that still show you. If listings return, read what to do when removed information keeps reappearing.
If you do not live in California
DROP is not available to non-residents. Other tools exist, such as manual opt-outs described in how to opt out of data brokers yourself, and rights under other state or national laws.
Sources
- CalPrivacy: Delete Request and Opt-out Platform (DROP) (free, California residents, launched January 1, 2026, over 600 brokers)
- CalPrivacy: DROP data broker deletions, how do they work? (rolling 45-day deletions, status updates up to 90 days, eight-digit DROP ID)
- CalPrivacy: DROP for data brokers (brokers must process DROP requests at least once every 45 days from August 1, 2026)
Frequently asked questions
Who can use DROP?
California residents. You can also file for an eligible relative.
Does DROP cost anything?
No. The agency describes it as free.
How long do deletions take?
Brokers process on a rolling 45-day basis, and status updates can take up to 90 days.
Will DROP remove everything about me?
Not necessarily. Public records, regulated data and companies not on the registry may remain. Brokers can also collect new data.
How do I check progress?
Use your eight-digit DROP ID to see statuses such as deleted, exempted, opted out of sale, not found and pending.
See if your email has already leaked
- Checks your email against known data breaches
- Shows which sites leaked it, when, and what leaked
- We do not store the email you check
Compare data removal services
See which services work in your country, what they cost, and the free do-it-yourself route.
Compare removal services →Prefer a one-time report first? Scan My Shadow, our sister service, $9.99.