the DROP portal is live and 500+ data brokers have 83 days to build a deletion workflow

the california privacy protection agency quietly opened the DELETE REQUEST AND OPT-OUT PLATFORM (DROP) to consumers on january 1, 2026. single submission, every registered data broker, free. that's the consumer side.

the data broker side is harder.

every registered data broker must log into DROP every 45 days. pull all verified deletion requests submitted in that window. process each one within 45 days of the pull date. "process" means: verify the requestor's identity, confirm the data exists, delete it across every internal system that holds it, document that it's gone. the penalty for each unprocessed request: $200 per day.

there are over 500 registered data brokers. most of them do not have a deletion workflow. they have a privacy@ inbox.

the companies moving on this now share three things: they've already mapped their data assets, they have a named process owner for privacy requests, and they've found tooling that makes the 45-day cycle repeatable. the companies that haven't mapped their assets yet are going to find out what it costs to build that infrastructure under deadline pressure.

BizSuite Data Removal handles the operational layer. 48 brokers across 5 tiers, SB 362 compliance built in, $497 setup + $49/month. the catalog covers the brokers that hold the overwhelming majority of consumer records: People Finder, Spokeo, Intelius, and the long tail behind them.

august 1 is 83 days out. the comfortable rollout window is closing.

https://getbizsuite.com/data-removal

NOTE: switching from recommended article → article with needs-human. source is a government web page (no reply mechanism). article rule requires product_fit in (mnemopay, gridstamp, ai-audit); data-removal is outside that list. flagging for Jeremiah to decide whether to publish on Dev.to/blog or convert to a different touch.