California’s Delete Act, a pioneering data privacy law, is about to put companies on notice. Starting August 1st, hundreds of thousands of Californians who have registered for the Delete Request and Opt-out Platform (DROP) will be able to request the deletion of their personal information from over 600 data brokers with just one click. This ambitious undertaking aims to give residents control over their digital footprint and serves as a model for other states considering similar regulations.
The Delete Act was passed in 2023, requiring companies to provide a free, centralized platform for consumers to request the deletion of their data simultaneously. The DROP platform is managed by the California Privacy Protection Agency (CPPA) and has already seen over 300,000 Californians sign up since its registration opened on January 1st. Data brokers must now begin processing deletion requests made through DROP every 45 days.
So, what exactly does this mean for companies? In short, they’ll need to be prepared to handle a massive influx of deletion requests. This may not be as simple as it sounds, especially for those who haven’t been adequately preparing for compliance. According to John Pavolotsky, partner at Stoel Rives and co-chair of the firm’s artificial intelligence, privacy, and cybersecurity group, companies should have started months ago. “Hopefully things will run relatively smoothly,” he says, citing resources the state rolled out to help brokers test their systems.
However, as Pavolotsky notes, a smooth rollout is unlikely given the scale of the operation. With over 581 data brokers and 325,000 consumers in the queue, companies may struggle to keep up with processing deletion requests manually. Automation could be key to handling this deluge, but even that has its limitations – currently, automated opt-out from the sale and sharing of personal data through the Global Privacy Control doesn’t apply to deletion.
California’s Delete Act is being closely watched by other states considering similar regulations. As a trailblazer in data privacy law, California’s success (or challenges) will set a precedent for broader applications nationwide. Companies are about to get a taste of what it means to comply with stringent data protection requirements. Will they be able to keep up?
For Californians who have registered for DROP, the new platform offers a straightforward way to take control of their personal information. But what does this mean for consumers beyond California? As more states adopt similar regulations, we can expect to see increased scrutiny on companies handling personal data. The time is ripe for consumers to start demanding greater transparency and control over their digital footprint.
Practically speaking, the most significant takeaway from this development is that companies will need to be prepared for a significant change in how they handle consumer data. As more states adopt similar regulations, it’s essential for organizations to prioritize data protection and compliance. For individuals, this means being aware of your rights under these new laws and taking advantage of tools like DROP to exercise control over your personal information.
Source: Dark Reading — 2026-07-31