California's DROP portal goes live August 1 — what it means if your data is on 545 registered brokers
January 1, 2026, California launched the Delete Request Opt-out Portal (DROP). August 1, 2026 is when it gets teeth: every registered data broker (545 of them) is required to check the portal every 45 days and honor deletion requests. That's the enforcement flip.
The practical reality for most people: even if you submit a DELETE request through DROP, each of those 545 brokers processes requests differently. Some have 45 days to comply. Some will re-add your data after the window closes if a third-party aggregator pushes it back in. DROP handles the intake — it doesn't guarantee removal or track whether brokers actually followed through.
What DROP doesn't solve is monitoring. A broker removing you on August 1 doesn't mean they don't re-add you from a downstream data source in September. The regulation requires a 45-day processing cycle, not a permanent deletion guarantee.
the practical checklist if you're a California resident:
- submit to DROP (takes about 10 minutes, covers all 545 registered brokers in one request)
- separately opt out of the major unregistered aggregators (they're not under DROP jurisdiction): Spokeo, Whitepages, BeenVerified, Intelius, and about 40 others
- re-check your listings in 60-90 days — re-population from downstream data is common
the data-removal service at BizSuite handles the 40+ broker sweep that DROP doesn't cover, plus quarterly re-checks to catch re-population: $497 + $49/mo. built with California's SB 362 (Delete Act) compliance baked in across all 5 data tiers.
Top comments (0)