What You Need to Know About California's DROP Tool
EFF Deeplinks
- California residents can use the Delete Request and Opt-out Platform (DROP) to request that all registered data brokers delete their personal information and stop selling or sharing it.
- A single DROP request currently reaches 614 registered data brokers.
- Data brokers have until August 1, 2026, to begin complying with requests, after which they have 45 days to address each request.
- The tool is administered by the California Privacy Protection Agency (CPPA).
Benefits and Scope
- Filing a request helps reduce unwanted spam, minimizes the number of entities holding personal data to improve cybersecurity, and increases control over how private information is used.
- The platform covers identifying information, such as Social Security numbers, geolocation, browsing history, and inferred data like political views or health assessments.
- Public records, such as vehicle or real estate ownership, are generally not subject to deletion.
How to Use the System
- Visit the CPPA DROP website to file a request; applicants should have identifiers like an advertising ID or VIN ready for submission.
- Applicants must provide personal details for identity verification, which the agency is legally restricted from selling or sharing.
- Users receive a DROP ID to track their request status.
- Requests can be filed on behalf of others, provided the filer attests to their residency.
Important Caveats
- The system does not stop companies from collecting new information in the future, meaning periodic updates to the request are advisable.
- DROP does not apply to non-data-broker companies like Google.
- The tool is currently restricted to California residents, though other states are monitoring the program for potential legislative adoption.