If you're a California resident who wants personal information removed from data brokers, start with the state's official Delete Request and Opt-out Platform, known as DROP. One request can reach data brokers registered in California, but it won't automatically remove information from every company, website, or database.

California's Delete Act is the rule behind the platform. The process is different from a general business privacy checklist, a GDPR request, or a paid data-removal subscription.

DROP at a glance

Use the official California DROP platform rather than a lookalike website or an unverified service.

What California DROP actually controls

DROP is a state platform for sending deletion requests to data brokers covered by California's Delete Act. The California Governor's Office describes the system as a way for Californians to submit one request to registered data brokers and tell them to stop selling their personal information.

The platform does not work like a universal “erase me everywhere” button. It does not automatically contact every retailer, app, employer, website, marketing company, or other business that may have information about you. A separate company may need to be contacted through its own privacy or data-request process.

Beginning August 1, 2026, data brokers must access the accessible deletion mechanism at least once every 45 days and process consumer deletion requests, subject to limited exceptions. The California Privacy Protection Agency's data broker guidance says brokers may access the deletion lists manually or through an API.

That 45-day requirement is a recurring obligation for brokers. It does not mean every record will disappear immediately, and it does not guarantee that a matching record exists or that every request will be granted.

Who can use DROP?

The platform requires you to verify that you're a California resident under the definition used in its terms. If the verification providers can't confirm your residency, the DROP terms of use say you may request a review of your residency classification under the applicable California regulation.

Use accurate information during the verification process. Don't submit a false address or upload sensitive identity documents to a third-party website claiming to offer faster access.

If you don't live in California, DROP may not be available to you. Check your state's privacy rules and the company's own privacy policy instead. State privacy rights differ, and a California deletion platform shouldn't be treated as a nationwide request system.

How to submit a data broker deletion request

1. Start at the official platform

Type the official address into your browser or use the link above. Check the domain before entering personal information. Be cautious with services that use California-related branding but ask for payment or unnecessary identity documents.

2. Complete residency verification

Follow the platform's instructions and provide only the information it requests. The purpose of this step is to confirm that you qualify as a California resident. If automated verification fails, look for the platform's review option rather than repeatedly submitting altered information.

3. Submit the request

Review the request language before sending it. DROP is designed for deletion requests directed to registered data brokers. The Delete Act also addresses the right to tell data brokers to stop selling personal information, so read the platform's confirmation carefully to understand how deletion and sale opt-out choices are described.

4. Save proof of submission

Keep the confirmation page, email, reference number, and submission date if the platform provides them. A simple record should include:

• The date you submitted the request
• The account or contact information used for verification
• Any confirmation number
• The names of brokers shown in the confirmation
• Screenshots of important status messages

Don't send a full Social Security number, identity document, or other highly sensitive information to a broker unless its official privacy channel specifically requires it. Redact unnecessary details when you save evidence.

5. Track the processing window

Starting August 1, 2026, registered brokers must check DROP at least every 45 days and process the requests they receive, subject to limited exceptions. Mark the submission date and monitor the platform or broker notices instead of expecting an instant result.

The recurring 45-day access duty belongs to the broker. You aren't being told to file the same request every 45 days. A new request may become useful later if information is collected again, but first keep the original confirmation and response.

What a deletion result means

A successful result means a particular registered broker acted on information it matched to your request. It does not prove that:

• No other broker has a copy
• A separate company has deleted its records
• The information can't be collected again from another source
• Every use of the information has stopped immediately

A broker may not find a matching record, or a limited legal exception may affect how it handles a request. The CPPA's data broker guidance also says qualifying brokers must report the number of requests they received, complied with in whole or in part, and denied in their privacy policies by July 1 following the first year they meet the data broker definition.

Treat a response as information about that broker's records, not as proof that your entire online profile has been erased.

What to do if your information remains

If you can still find a listing after the broker has had an opportunity to process the request, create a short evidence file:

1. Record the broker's name and the exact profile or page address.
2. Take a dated screenshot showing the information still appears.
3. Save your DROP confirmation and any response from the broker.
4. Use the broker's official privacy contact or consumer request form.
5. Ask what happened to the request and whether the broker needs additional information to locate the record.
6. Review the CPPA's current data broker resources for official instructions or enforcement information.

Keep your message specific. Include the request date and reference number, but don't disclose more personal information than necessary. If the broker says it has no matching record, a separate broker or data holder may still have the same information. That company will require its own request.

What does not replace a DROP request?

A generic GDPR, FTC Safeguards, HIPAA, or FINRA checklist is not a substitute for using California's deletion platform. Those frameworks can apply to particular organizations or types of data, but they don't turn DROP into a request channel for every business in the United States.

Likewise, contacting a search engine may remove a result from search without deleting the underlying broker record. Contacting one people-search website doesn't necessarily reach other sites owned by different companies.

For a business that isn't covered by DROP, read its privacy policy and use its listed request channel. Keep a copy of what you asked for and the company's response.

Should you pay for a data-removal service?

A paid removal service is optional and separate from California's government platform. It may offer monitoring or coverage beyond the California registry, but its results depend on the provider's site list, request process, and subscription terms.

Before paying, check:

• Which websites and data brokers are covered
• Whether monitoring continues only while you subscribe
• The recurring price and renewal terms
• Cancellation and refund rules
• How the service documents completed or rejected requests
• Whether it sends requests in your name or asks for broad account access

You can begin with the official DROP platform without assuming that a private service is required. A vendor's claim that it monitors “thousands” of sites doesn't establish that it covers every broker or can force deletion from every database.

California DROP consumer checklist

• [ ] Confirm that you meet the platform's California residency requirement.
• [ ] Use the official DROP website.
• [ ] Read the request and confirmation language.
• [ ] Save the submission date and reference number.
• [ ] Note that registered brokers must access DROP at least every 45 days beginning August 1, 2026.
• [ ] Review the result for each broker covered by the request.
• [ ] Contact a broker directly if a matching listing remains.
• [ ] Submit separate requests to companies outside the registered broker system.
• [ ] Avoid sending unnecessary identity documents or account credentials.
• [ ] Compare coverage and recurring terms before paying a removal service.

Frequently asked questions

Can anyone in the United States use DROP?

No. The platform requires residency verification for California residents. If you live elsewhere, check the privacy process offered by the business and the laws that apply in your state.

Will one DROP request delete my information from every data broker?

It is intended to reach registered California data brokers, not every company that may hold your information. A broker outside the registry or a separate data holder may require a direct request.

Does the August 1, 2026 date mean my data will be deleted that day?

No. August 1 is when the recurring broker access and processing obligation begins. A broker may need to match your information, and limited exceptions can affect the result.

What if DROP can't verify my California residency?

Follow the platform's review procedure. Its terms say you may request a review of your residency classification if the verification providers cannot confirm it.

This is general consumer information, not legal advice. Start with the official DROP platform, save your confirmation, and use a separate privacy request for any company that the platform does not cover.