If you live in California, the Delete Request and Opt-out Platform (DROP) lets you submit one deletion request to covered data brokers through a state platform. The key 2026 date is August 1, 2026. Starting then, data brokers must access DROP's accessible deletion mechanism at least once every 45 days and process consumer deletion requests, subject to limited exceptions.
August 1 isn't a deadline for you to file. It is the date tied to the brokers' processing duties. After you submit a request, the California Privacy Protection Agency (CPPA) says it may take up to 90 days for processing status to appear. The 45-day access cycle is therefore not a promise that your information will be deleted within 45 days.
What California DROP covers
DROP is for California residents. Before you submit a request, the portal requires you to verify that you are a California resident under the applicable state definition.
California generally treats a data broker as a business that knowingly collects and sells consumers' personal information without a direct relationship with those consumers. The California Privacy Protection Agency's data broker guidance describes the businesses and obligations covered by California's data-broker law.
DROP is not a universal deletion button. A retailer, bank, employer, healthcare provider, app, or website that has a direct relationship with you may have its own privacy-request process. Whether a particular business is covered can depend on its role and an applicable exception.
California DROP dates and timing
| Date or period | What it means |
|---|---|
| August 1, 2026 | Covered data brokers must begin accessing DROP and processing consumer deletion requests. |
| At least every 45 days | Starting August 1, 2026, brokers must access the platform's deletion mechanism on this recurring schedule. |
| Up to 90 days | The CPPA says it may take this long for a broker's processing status to appear in DROP. |
| January 31 | A data-broker registration date that can apply to qualifying businesses. |
| July 1 | A privacy-policy reporting date that can apply to qualifying data brokers after the first year they meet the applicable definition. |
January 31 and July 1 are business compliance dates, not consumer filing deadlines. They do not require a California resident to submit a separate DROP form by either date. For consumers, the relevant steps are to complete the portal's residency check, submit the request, save the eight-digit confirmation ID, and monitor the results.
How to submit a California DROP request
- Start with the official portal. Use the official DROP consumer portal. Avoid third-party forms that present themselves as the state platform.
- Complete the residency check. Follow the portal's instructions to verify that you are a California resident.
- Request a review if verification fails. If the verification service cannot confirm your residency, use the portal's instructions to request review of your residency classification.
- Submit the deletion request. Provide the information the portal requests and check the submission before sending it.
- Save the confirmation. The confirmation page includes an eight-digit DROP ID. Keep it with the submission date and any confirmation message.
- Check the status later. Status information may take up to 90 days to appear. Use your DROP ID when checking the request.
The CPPA's explanation of how DROP works describes the consumer process and the expected delay before status information appears.
What a DROP result means
Different brokers can produce different results. One may locate information connected to your identifiers, another may report no matching information, and another may report that an exception applies.
Read the status for each broker separately. A confirmation that you submitted a DROP request only confirms the submission. It does not prove that every broker had your information or that every copy of similar information has disappeared from the internet.
DROP also does not control every business that may hold your information. A company with a direct relationship with you may retain data under its own privacy policy or an applicable exception. Information could also be collected again later by another business.
If you are trying to stop marketing messages, deleting information from a data broker may not stop messages from a company that already has your contact information. You may need to use that company's unsubscribe option or privacy-request process separately.
What to do if a request is delayed or unclear
Keep the records you created when you filed:
- Confirm that you are checking the correct DROP ID.
- Note the date you submitted the request.
- Save screenshots or messages showing the status for each broker.
- Allow the stated 90-day period before treating a missing status as a processing problem.
- If no status appears after that period, return to the official DROP overview and follow the current platform or agency instructions.
- If a result looks incorrect, keep the broker name, status, dates, and relevant evidence together before seeking help through the official instructions.
Do not post your DROP ID, identity documents, date of birth, or other personal information publicly while asking for assistance.
California DROP FAQ
Do I have to submit my request by August 1, 2026?
No. August 1 is when covered data brokers must begin processing DROP requests. It is not a consumer filing deadline. Check the official portal for its current availability and instructions.
Does DROP work for people outside California?
The platform requires California residency verification. People who live elsewhere should not assume that a DROP request will apply to them. Other states may provide different privacy rights or request systems.
Does one DROP request delete my information from every company?
No. DROP is aimed at covered data brokers. A retailer, bank, employer, healthcare provider, app, or other company with a direct relationship to you may require a separate request through its own privacy process.
Why can a status take 90 days if brokers check every 45 days?
The 45-day requirement concerns how often brokers access the deletion mechanism. The CPPA separately says that consumers may wait up to 90 days to see status information. Those are different periods, and neither one guarantees a particular deletion result.
What should I keep after submitting a request?
Keep the eight-digit DROP ID, submission date, confirmation message, and later status screenshots. Those records can help you identify a delayed or disputed result without resubmitting unnecessarily.
If you are eligible, use the official California DROP portal and save the confirmation ID as soon as your request is submitted.