California’s New Data Privacy Law: Simplifying Data Deletion Requests

California residents now have a streamlined process to control their personal data, thanks to the recent implementation of the Delete Request and Opt-out Platform (DROP). This new system, effective January 1, 2026, substantially simplifies the process of requesting data deletion from the hundreds of data brokers operating in the state.

the Rise of Data brokers and privacy Concerns

Data brokers are companies that collect personal facts about individuals from various sources – including public records, online activity, and purchase histories – and then sell that information to third parties. According to the California Privacy Protection agency, over 500 companies are actively engaged in this practice. This data can be used for targeted advertising, risk assessment, and other purposes, raising important privacy concerns for consumers.

A 2024 report by Consumer Watchdog revealed that data brokers gather information from a wide range of sources, including automakers, tech companies, restaurants, and device manufacturers, compiling detailed profiles on individuals’ financial information, purchasing habits, family situations, and even lifestyle choices.

The California Delete Act and Its Limitations

in 2023, California enacted the California Delete Act, granting residents the right to request data brokers to disclose and delete their personal information. However, the initial implementation proved cumbersome. Consumers were required to submit individual deletion requests to each data broker, a process that proved overwhelming given the sheer number of companies involved. Consumer Watchdog found that only approximately 1% of Californians exercised their deletion rights in the first year due to this logistical challenge.

Introducing DROP: A Centralized Deletion Platform

to address the limitations of the Delete Act, California launched DROP on January 1, 2026. DROP acts as a centralized platform, allowing California residents to submit a single data deletion request.The California Privacy Protection Agency then automatically forwards this request to all registered data brokers, simplifying the process and increasing the likelihood of accomplished data removal.

How DROP Works

• Single Request: Residents submit one request through the DROP platform.
• Automated Distribution: CalPrivacy distributes the request to all participating data brokers.
• Broker Compliance: Data brokers are legally obligated to process the request and delete the consumer’s data.

Key Takeaways

• California is leading the nation in data privacy protection with innovative legislation like the Delete Act and DROP.
• Data brokers collect and sell vast amounts of personal information,posing privacy risks to consumers.
• DROP simplifies the data deletion process, making it easier for Californians to exercise their privacy rights.

The implementation of DROP represents a significant step forward in protecting consumer privacy in California. By streamlining the data deletion process, the state is empowering residents to take control of their personal information and reduce the potential for misuse.