Court Rules
All enforcement actions
Regulatory ReportLow Risk

California Privacy Protection Agency Announces DROP Milestone and Data Broker Registry Record

California Privacy Protection AgencyJune 2, 2026California Privacy Protection Agency

Consumers Affected

300,000

Summary

The California Privacy Protection Agency announced that over 300,000 Californians have signed up for the Delete Request and Opt-out Platform (DROP) since its launch five months ago. The Data Broker Registry now includes 581 registered data brokers, the highest number since the registry was established in 2020. Beginning August 1, 2026, all data brokers will be required to access DROP and process deletion requests.

Contract Impact

In-house legal teams should review vendor agreements with data brokers to ensure they include provisions for processing deletion requests through DROP as required by the Delete Act. Key clauses to examine include data processing obligations, deletion timelines, and compliance with California privacy laws. Additionally, contracts should specify that data brokers must delete not only current data but also any future data acquired about the consumer, and should include audit rights to verify compliance with deletion requests.

Contract Search Terms

data broker deletion requestopt-out platformdata broker registryDelete Act complianceconsumer data deletiondata broker agreementdata processing for deletionCalifornia resident data rights

Laws Cited

California Consumer Privacy ActDelete ActOpt Me Out Act

Violation Types

Entity Details

Entity

California Privacy Protection Agency

Industry

Other

Official Sources

Source Evidence

Entity Name
"California Privacy Protection Agency"
Consumers Affected
"more than 300,000 Californians signing up for the free tool since its launch just five months ago"
Laws Cited
"California Consumer Privacy Act, Delete Act, and Opt Me Out Act"
Violation Types
"581 registered data brokers, the highest number of registrants since the registry was established in 2020"

Related Enforcement Actions

CA

California Privacy Protection Agency

The California Privacy Protection Agency (CalPrivacy) joined a coalition of 18 Attorneys General and state agencies in opposing the proposed SECURE Data Act, a federal privacy bill that would preempt stronger state privacy laws like the CCPA. The coalition argues the bill would weaken consumer privacy protections, limit enforcement remedies, and undermine California's Delete Request and Opt-out Platform (DROP).

CA

California Privacy Protection Agency

The California Privacy Protection Agency Board voted to support two bills (AB 1542 and SB 1106) and took a 'support if amended' position on a third bill (AB 883). These bills aim to strengthen privacy protections by expanding sensitive data protections, improving deletion rights under the Delete Act, and providing expedited deletion for elected officials and judges.

CA

California Privacy Protection Agency

The California Privacy Protection Agency sent a letter to Congress opposing the SECURE Data Act, a federal bill that would preempt state privacy laws like the CCPA and Delete Act. The letter argues the bill would eliminate rights for 40 million Californians, including the DROP platform and opt-out preference signal requirements, and urges Congress to set a floor rather than a ceiling on privacy protections.

CPPA

California Privacy Protection Agency

The California Privacy Protection Agency launched a statewide roadshow to promote its Delete Request and Opt-out Platform (DROP), which allows California residents to request deletion of their personal information from all registered data brokers in a single request. The roadshow aims to increase awareness of data privacy rights and the DROP tool, which data brokers are legally required to process starting August 1, 2026.

CPPA

California Privacy Protection Agency

The California Privacy Protection Agency (CalPrivacy) announced the appointment of Sabrina Boyson Ross as its first Chief Privacy Auditor and the formation of a new Audits Division. The division will conduct regulatory examinations of businesses to determine compliance with the California Consumer Privacy Act, and its findings may lead to enforcement referrals.

CA

California Privacy Protection Agency

Press release announcing the appointment of Nicole Ozer to the California Privacy Protection Agency Board. No enforcement action is described.