If you're a California resident and want data brokers to delete your personal information, the state's Delete Request and Opt-out Platform, known as DROP, is the main starting point. It lets you submit one request to active registered data brokers instead of contacting each one separately.

DROP doesn't erase information from every company or remove your entire online history. Its reach is limited to data brokers covered by California's rules, and some legal exceptions may apply.

What California's DROP platform does

Data brokers collect personal information from different sources and sell or license it to businesses. The California Privacy Protection Agency says brokered information may include contact details, browsing history, precise geolocation, health-related information, Social Security numbers, and information about children. The categories vary by business.

DROP provides a centralized way for California residents to request deletion from active data brokers listed in the state's system. You can start from the California Privacy Protection Agency's DROP information page or use the official DROP platform.

According to CPPA's published guidance:

• California residents may use DROP to submit a request beginning January 1, 2026.
• Data brokers begin processing those requests on August 1, 2026.
• Beginning August 1, 2026, data brokers must access DROP at least once every 45 days and process deletion requests, subject to limited exceptions.
• DROP says it could take up to 90 days for a request's status to appear as updated.

The 45-day access requirement and the possible 90-day status-update period are different. Don't assume that a status page will change immediately after you submit a request.

Who can use DROP?

DROP is for people who qualify as California residents under the definition used by the state. Before submitting a deletion request, you'll need to verify that residency.

The verification process may use outside verification service providers. If you can't confirm your California residency through those providers, the official DROP information says you may request a review of your residency classification under the applicable California regulation.

Follow the instructions on the official platform and provide only the information requested there. Avoid entering personal details into an unofficial opt-out site simply because it uses the DROP name or California branding.

If you live outside California, don't assume DROP applies to you. Check the privacy or opt-out process for each data broker and review the law that applies in your state.

How to submit a data-broker deletion request

1. Start with the official platform

Use the state links above rather than a paid intermediary or an online form found through an advertisement. Confirm that you're on a California government website before entering identity or residency information.

2. Complete residency verification

The platform requires you to confirm that you're a California resident. If the automated verification doesn't work, look for the official review procedure instead of repeatedly submitting incomplete information.

3. Submit the request to the listed brokers

Review the request details before sending it. DROP is intended to distribute your deletion request to active data brokers covered by the program. It isn't a request to close a retailer account, delete a social-media profile, or remove information held by every website you've used.

4. Save your records

Keep the confirmation screen, submission date, request reference number, and any emails or status messages. If a broker later says it can't locate your request, these records can help establish what you submitted and when.

5. Check the status

Allow time for brokers to process the request and for the platform to update. The official DROP site warns that a status update may take up to 90 days.

A delay in the status page doesn't automatically prove that a broker ignored the request. First check whether the request is still within the published processing window and whether the platform asks for additional verification.

Limits and exceptions to understand

A deletion request isn't an absolute guarantee that every piece of information will disappear. California's requirements include limited statutory exceptions, so a broker may be allowed to retain certain information or decline part of a request in specific circumstances.

DROP also has a defined scope:

• It applies to covered data brokers, not every business that holds personal information.
• It doesn't automatically delete information from the original source that supplied it.
• It doesn't close accounts or cancel marketing relationships with individual companies.
• It doesn't guarantee that new information will never be collected later.
• A broker's response may cover only the information it can match to your request.

Use the CPPA data broker registry to confirm whether a business appears in the state's registered-broker system. If a company isn't covered by DROP, look for that company's own privacy request or opt-out instructions.

What to do if a broker still has your information

If a broker remains listed after the relevant processing period:

1. Check the DROP status and any explanation attached to the request.
2. Confirm that the business name matches the entry in the CPPA registry.
3. Save screenshots or copies of the response, including the date.
4. Use the broker's published privacy contact if the registry or its privacy policy provides one.
5. Review the CPPA's current data-broker guidance for the agency's latest instructions on registration, deletion requests, and compliance information.

If the broker claims an exception applies, ask for the reason in writing when the company's process allows it. Don't describe a request as fully denied unless the status or written response actually says that.

Does DROP opt you out of all data sales?

No. DROP is a California deletion and opt-out mechanism for covered data-broker activity. It isn't a universal switch for every company that collects, uses, or shares personal information.

A business outside the data-broker system may have its own opt-out form. Advertising platforms, retailers, apps, and other services can also have separate privacy controls. Those requests must be handled through the relevant company unless California's rules otherwise bring the business within DROP's scope.

How to get ready before submitting

Make the process easier by:

• Using the official DROP site, not an unofficial form.
• Reading the verification prompts before submitting.
• Saving confirmation details and dates.
• Checking the status periodically rather than submitting duplicate requests immediately.
• Keeping a list of companies that aren't covered so you can use their individual privacy processes.
• Limiting the personal information you provide to what the official process requests.

DROP is most useful as a centralized California data-broker deletion request, not as a promise to remove every trace of your information. Start with the official platform, keep your confirmation, and use the CPPA registry to investigate any broker that falls outside the expected result.

This information is for general consumer education and isn't legal advice.