The short answer

There isn't one national 2026 deadline for every data broker refund claim. A payment depends on a specific FTC refund program, court-approved settlement, or company refund policy. The official notice for that program controls the eligibility rules and deadline.

California's Delete Request and Opt-Out Platform (DROP) is different. It gives eligible Californians a way to send one deletion request to registered data brokers, but submitting a DROP request doesn't automatically create a compensation claim.

The dates most consumers are likely to see are:

• January 1, 2026: California consumers could begin submitting a single deletion request through DROP.
• January 31, 2026: The data broker registration deadline for businesses required to register in California. This is a broker compliance date, not a consumer refund deadline.
• August 1, 2026: California data brokers must access the accessible deletion mechanism at least once every 45 days and process requests, subject to limited exceptions.
• A date listed in an FTC or settlement notice: The actual deadline for a cash claim.

2026 data broker deadlines that matter

The California dates are easy to confuse because they apply to different steps. The Governor of California's explanation of DROP says Californians can submit one deletion request beginning January 1. The California Privacy Protection Agency's data broker guidance explains that, beginning August 1, brokers must access the deletion mechanism at least once every 45 days.

That 45-day requirement is not a promise that a refund will arrive within 45 days. It is a recurring broker obligation for handling deletion requests.

What actually controls a refund?

Before collecting documents, identify which type of payment you may be seeking.

An FTC refund program

The Federal Trade Commission sometimes distributes money through case-specific refund programs. Its FTC Refund Programs page is a useful starting point, but it isn't a universal claim form for every data broker.

If the FTC is involved, check the case name, administrator, eligibility period, required evidence, and final filing date. Use only the instructions linked from an official FTC page or the official administrator identified in the notice.

An FTC enforcement penalty also isn't automatically a payment to every person whose information a company held. A consumer payment requires a specific refund program or other legal process that invites eligible claims.

A class action or bankruptcy settlement

A data breach settlement has its own class definition and deadline. The date may depend on when a claim is submitted, received, or postmarked. Some notices request proof of losses; others may allow a simpler claim.

Don't rely on a headline amount or a date copied from a social media post. Confirm all of the following in the court-approved notice or official claim website:

• The defendant's exact legal name
• The covered breach or transaction dates
• The definition of an eligible class member
• Whether you must document financial loss
• The deadline and time zone
• Whether online, mailed, or late claims are accepted

A settlement involving a technology company or a breach is not automatically a data broker refund program, and a deadline for one case does not apply to another.

A refund from a service you paid

If you paid a data-removal company, privacy service, or another business that promised to suppress or delete your information, the first source for a refund is the service's contract and refund policy. The California Delete Act doesn't automatically refund a private subscription or service charge.

Ask the business for cancellation or a refund in writing. Keep the receipt, terms in effect when you paid, account emails, and the company's response. If the charge was unauthorized or the business failed to follow its stated policy, contact your card issuer or bank promptly about its dispute process. Payment-dispute deadlines are separate from privacy-law deadlines.

How to check whether a refund deadline is legitimate

Use this process before sharing personal or financial information:

1. Write down the exact program name. A breach notice, settlement, FTC case, and data-removal subscription are different matters.
2. Start with the official source. Use the FTC's refund directory, a court-approved settlement notice, or the service's own verified support page.
3. Read the eligibility section. Confirm your state, account or transaction dates, and whether the program requires a claim form.
4. Check the submission rule. A deadline can require electronic submission by a particular time or a mailed form to be received by a particular date.
5. Prepare only the requested evidence. Don't send a full bank statement, Social Security number, or identity document to an unverified email address.
6. Submit early and save proof. Keep the confirmation page, claim number, submitted form, and copies of attachments.
7. Watch for fraud. Don't pay someone to “release” a refund or provide a bank login, password, or one-time security code.

If an alleged deadline appears only on a blog or social media post and you can't match it to an official notice, treat it as unconfirmed.

California DROP: deletion, not compensation

DROP is designed for California consumers who want to send a single request to registered data brokers. It is not a general refund portal.

A practical way to use it is:

1. Open the CPPA's official data broker information page and follow its current DROP instructions.
2. Complete the identity or account verification requested by the official platform.
3. Submit the deletion request and record the confirmation.
4. After August 1, check the status or responses provided for the participating brokers.
5. Save refusals, exception notices, and other responses if you need to follow up.

The Delete Act includes limited exceptions, so a broker may not handle every record in exactly the same way. DROP also directs requests to registered data brokers; it doesn't prove that every website, public record, downstream recipient, or unrelated company has erased information.

The CPPA's description of an access fee applies to data brokers that access or download deletion lists. It should not be confused with a consumer refund, a payment to California residents, or a fee that you must pay to make a cash claim.

What evidence should you keep?

The right documents depend on the program. Useful records can include:

• The breach, settlement, or refund notice
• The email address, mailing address, or account identifier tied to the service
• Receipts and invoices
• Bank or card statements showing an eligible charge
• Records of identity theft or other documented losses, if the notice requests them
• Correspondence with the company or claim administrator
• Your claim confirmation number and submission date

Don't manufacture a loss or claim more than the notice allows. If a form asks for ordinary expenses, extraordinary losses, time, or documentation, answer each category separately and keep copies of what you submit.

If you're outside California

There is no single federal data broker refund deadline that applies across the United States. Other states may give residents privacy rights such as deletion, opt-out, or access rights, but those rights don't automatically create a refund.

Check the privacy agency, attorney general, or official consumer-protection source for your state. A broker's privacy notice may also explain how to submit a direct request. Keep that request separate from any FTC or court settlement claim because the procedures and deadlines are different.

What if you missed the deadline?

Act anyway, but don't assume a late claim will be accepted.

• FTC program: Check the official refund page and the case administrator's instructions for any late-claim policy.
• Court settlement: Contact the administrator listed in the official notice. Extensions are not guaranteed, and an unofficial “extension” website may be a scam.
• California deletion: The January 31 date was a broker registration deadline, not a consumer compensation deadline. Follow the current DROP instructions for a deletion request.
• Paid service: Ask the provider for a refund and review the separate deadline for any bank or card dispute.

If you already filed a claim, don't submit duplicates unless the administrator tells you to. Use your claim number to request a status update and report a changed mailing address or payment preference through the official channel.

Enforcement does not equal a consumer payout

California enforcement actions can produce fines and required business changes without creating a check for every affected consumer. For example, the CPPA says its LocateSmarter decision required the company to pay $116,490 and change its practices after alleged registration and privacy-rights violations.

That type of order shows that regulators can act against data brokers. It does not, by itself, establish a consumer refund program. Look for a separate notice that explains who may claim money and how.

Frequently asked questions

Is January 31, 2026, the California data broker refund deadline?

No. January 31 was a data broker registration deadline. It wasn't a deadline for California residents to claim compensation.

Does California DROP pay consumers?

No automatic payment follows from a DROP request. DROP is a deletion mechanism. A separate settlement, FTC refund program, or company policy must provide the basis for compensation.

Is there one FTC refund deadline for 2026?

No. FTC refund programs are case-specific. Check the FTC Refund Programs page and the official instructions for the named case.

Does a data breach guarantee a refund?

No. Exposure of personal information doesn't by itself establish eligibility for cash. A settlement or refund notice determines whether you qualify and what proof is required.

Can I use DROP if I don't live in California?

DROP is California's platform for California consumers. If you live elsewhere, use the privacy request process available under your state's law or the broker's official privacy notice, and check separately for any settlement or FTC program.

Start by identifying the exact company or case behind the alleged refund. Then verify its deadline through the official notice before submitting a claim or sharing sensitive information.