California launches DROP platform for statewide data broker opt-outs

On Jan. 8 the California Privacy Protection Agency activated the Delete Request and Opt-out Platform, known as DROP, under the state’s Delete Act. The system lets Californians submit one removal or opt-out request that is distributed to every data broker registered under the law, a change designed to streamline privacy requests that previously required contacting multiple companies.

DROP requires users to verify identity before submitting requests. Residents can authenticate through the California Identity Gateway or login.gov. The platform’s form asks for identifying details that help brokers locate records, including advertising IDs and vehicle identification numbers when relevant. After submission the user receives a DROP ID to track the request and responses.

The new process is structured around a phased timetable. Registered brokers began preparing to accept instructions from DROP on Aug. 1. Once a broker receives a DROP instruction, it has 45 days to process the removal or opt-out and up to 90 days to report its actions back to the agency. The platform’s designers emphasize single-point delivery: “The new system delivers privacy instructions to every registered broker at once.”

For Humboldt County residents, the practical effects are immediate and local. A single submission reduces the administrative burden for people who have had personal details spread across dozens of marketing and people-search services. Rural residents who rely on older vehicles or who share addresses across extended family networks may find that including VINs and advertising IDs on their DROP form helps target the records most likely to expose them to unwanted solicitation or fraud.

Institutionally, DROP centralizes enforcement and reporting through the California Privacy Protection Agency, creating a clearer chain of accountability between individual requests and broker responses. The 45-day processing window and 90-day reporting timeline create measurable deadlines; how consistently brokers meet those deadlines will be a key metric for evaluating the program’s effectiveness. Local officials and consumer advocates will be watching whether registered brokers comply and whether the agency follows up on missed or incomplete reports.

Residents should preserve their DROP ID, monitor responses, and keep records of any broker communications. If you do not see requested removals reflected in follow-up, document the discrepancies and raise them with the agency. Local organizations, libraries, and legal aid providers can help residents who need assistance verifying identity or completing the form.

Our two cents? Use DROP but treat it as the start of privacy work, not the finish line. Verify your DROP ID, save confirmations, and check for unwanted listings over the months ahead so your one submission actually yields the protections you expect.