Overview
- Californians can create profiles and file a single request now, with data brokers required to start processing submissions on August 1, 2026, delete within up to 90 days, and run deletions at least every 45 days thereafter.
- The state will forward each request to roughly 500 registered data brokers, replacing the previous need to contact hundreds of companies individually.
- Residents enroll through the California Identity Gateway or Login.gov, then provide details such as names, date of birth, contact information, Mobile Advertising IDs, and vehicle identification numbers to improve matching.
- Brokers may retain certain categories, including publicly available records and first‑party data collected directly by a business, even after a DROP request.
- The California Privacy Protection Agency cites expected benefits such as fewer spam calls and texts and lower risks of identity theft or fraud, with outcomes reported to the agency, daily fines for noncompliance, and independent audits beginning January 1, 2028.