California just formed a dedicated enforcement team for the DELETE Act. here's what changed

The California Privacy Protection Agency launched a Data Broker Strike Force. The timing is not subtle: the DROP portal enforcement date is August 1, 2026. The strike force is the enforcement arm that will pursue brokers who haven't integrated the DROP API by that date.

What changed is the enforcement signal. Before the strike force announcement, a broker could reasonably wonder whether the CPPA had bandwidth to pursue non-compliance given the complexity of the regulation. The strike force answers that question: they built a dedicated team. This is a priority.

what the strike force is focused on

The Crowell & Moring alert names three specific compliance failures the strike force is targeting:

1. DROP API integration — brokers must access the DROP portal via API, not through manual processes. Firms that built a manual workflow thinking it would satisfy the requirement are exposed.

2. 45-day retrieval cadence — brokers must pull deletion requests from DROP every 45 days. Missing a retrieval window is a standalone violation.

3. Deletion finalization within 90 days — once retrieved, deletion must be completed and documented within 90 days. Requests that sit in a queue aren't compliant.

Each of these is an independent failure point. A broker that integrated the API but is running a 90-day retrieval cadence instead of 45-day is still non-compliant.

the penalty structure favors aggressive enforcement

The DELETE Act penalty is $200 per deletion request per day. For a data broker receiving 1,000 deletion requests per month that misses the August 1 deadline, day one exposure is $200,000. By day 30 it's $6 million.

The CPPA doesn't need to find hundreds of violations to make the strike force cost-effective. A single large broker with a delayed integration generates enforcement revenue that funds years of strike force operations. This is a sustainable enforcement model.

what this means for individuals

The strike force enforcement pressure is ultimately what makes the DROP deletion right meaningful for California residents. The right to request deletion across all registered brokers in one submission is only valuable if brokers are actually processing those requests.

For individuals who want their data removed from people-search sites and data broker databases now — before the DROP mechanism is fully operational and before brokers potentially purge or restructure their databases in response to enforcement — the manual opt-out path is still the most reliable option.

BizSuite's data removal service covers 40+ brokers ($497 + $49/month for ongoing re-removal) and is built to handle the CA Delete Act scope specifically. Details at https://getbizsuite.com/data-removal.html