Background Alert got shut down. here's what every data broker needs to do before August 1.

the California Privacy Protection Agency didn't send a warning letter. they sent a shutdown order — Background Alert, Inc., ceased operations through 2028 for failing to delete consumer data under the Delete Act. and the CPPA just stood up a dedicated Data Broker Enforcement Strike Force to find the next one.

the deadline that matters is August 1, 2026. that's when DROP goes live — the Delete Request and Opt-out Platform that data brokers must check every 45 days. $200 per request per day for non-compliance. if you're running a data broker operation and you're still doing removals manually, that math gets bad fast.

the Background Alert case is worth reading carefully. the violation wasn't exotic. they failed to register with the CPPA and failed to delete data on request. two things that are operationally solvable — if you have the right infrastructure. the CPPA's strike force is explicitly targeting companies that are non-compliant on the basics.

here's what compliant looks like before August 1:

1. DROP integration. your system needs to poll the DROP platform every 45 days, ingest deletion requests, and process them. that's not a spreadsheet operation at volume. it requires an API integration with CPPA's portal and a queue that can handle burst.

2. broker registry. you must be registered with the CPPA as a data broker. the registry is public. the strike force checks it.

3. audit trail. starting January 1, 2028, independent third-party audits are mandatory. that means your deletion records need to be immutable and timestamped from day one — building the audit trail retroactively is harder than doing it correctly now.

4. CCPA alignment. the Delete Act sits on top of CCPA, not instead of it. opt-out requests under CCPA still apply. your deletion pipeline needs to handle both.

BizSuite's data removal product covers 48 brokers across 5 regulatory tiers, with the CA Delete Act and SB 362 built in. the $497 setup gets you the DROP integration and deletion automation. $49/month keeps the 45-day cadence running and logs every request for future audit — https://getbizsuite.com/data-removal

the Background Alert shutdown isn't the last one. the strike force is active. the question is whether your deletion infrastructure is ready before the next enforcement action, not after.