the california DELETE act's 45-day clock is now running — what you actually need to do
the DELETE Act (SB 362) is past the launch-phase writing. august 1, 2026 is when the DROP processing obligation becomes enforceable. data brokers must process centralized deletion requests within 45 days. the penalty for failing a single request: $200 per request per day.
for individuals — not data brokers — the calculus is different but equally urgent.
what the DELETE Act actually built
the CPPA's DROP portal lets a california consumer submit one deletion request that applies to every registered data broker simultaneously. before this, you had to find each broker's opt-out page, submit separately (often via forms designed to be hard to find), and repeat every few months because brokers re-acquire data from public sources: voter rolls, property records, social profiles.
DROP consolidated the submission layer. it did not consolidate the re-acquisition problem.
what happens after you submit a DROP request
brokers have 45 days to process. "process" means delete your data from their active databases. it does not mean they won't re-acquire the same data next quarter from a new public source.
the CCPA's 30-day response requirement and DROP's 45-day window both address the deletion. neither addresses the re-acquisition cycle.
the result: a DROP request is a one-time deletion. without ongoing monitoring, your data reappears on most brokers within 3-6 months.
what ongoing removal actually looks like
BizSuite's data removal service covers 48 brokers across 5 tiers with the CA DELETE Act / SB 362 workflow built in — including the DROP submission step. the $49/month monitoring tier handles re-acquisition: when a broker re-lists your data, the removal fires again automatically.
the $497 + $49/month structure is designed for the fact that one-time removal isn't removal.
the DROP deadline is august 1. if you're in california and your data is on these brokers, now is the right moment to handle this before the enforcement regime is live and broker attention is split between regulatory compliance and consumer requests.
Top comments (0)