California's Delete Act has moved from legislation to an operational statewide deletion mechanism. Here is what Californians can actually do in 2026 — and what the law does not promise.
The Biggest Change Is DROP
California created the Delete Request and Opt-Out Platform (DROP) under the Delete Act. The system is designed to let a California consumer make a single verifiable deletion request that reaches registered data brokers, rather than repeating the same deletion process across multiple brokers.
The CPPA says the DROP regulations took effect January 1, 2026. Beginning August 1, 2026, data brokers must access the system at least once every 45 days and process qualifying deletion requests, subject to limited exceptions.
What the Delete Act Covers
California defines a data broker as a business that knowingly collects and sells personal information to third parties about a consumer with whom the business does not have a direct relationship, subject to statutory exemptions.
DROP is therefore aimed at registered data brokers, not every website that happens to publish a person's information.
What Deletion Through DROP Actually Means
The CPPA explains that a consumer's single verifiable request can direct data brokers covered by the mechanism to delete the consumer's non-exempt personal information maintained by the broker and relevant service providers or contractors.
There are exceptions. Consumers should not describe DROP as a guarantee that every piece of information about a person on the internet disappears permanently from every source.
How the New System Changes the Old People-Search Workflow
Historically, consumers often had to opt out one people-search site at a time. California's DROP system is intended to reduce that repetition for registered data brokers.
Individual services such as people-search sites may still have their own privacy processes, and some businesses or databases may fall outside the Delete Act's definition or within an exemption. Always identify the entity and legal category before promising a result.
Keep Evidence Even After Using DROP
- Record the date you submitted the request.
- Save the confirmation or request identifier.
- Keep screenshots of relevant broker listings.
- Record which brokers are shown in the DROP system.
- Re-check the results after the applicable processing cycle.
- Keep evidence if information reappears later.
Do Not Promise "Permanent Deletion" Without Qualification
The Delete Act requires registered data brokers to maintain a list of deletion requests so they can prevent personal information from being collected again for as long as the request remains valid, subject to the statute and exceptions. That is powerful, but it is not the same thing as deleting public records from government databases or erasing information from every website on the internet.
What This Means Practically
- Use DROP as the primary California data-broker deletion mechanism in 2026.
- Understand that DROP targets registered data brokers, not every publisher or database.
- Keep evidence of the request and the brokers involved.
- Recheck after processing rather than assuming a same-day disappearance.
- Use individual privacy processes for entities outside DROP when appropriate.
Related Kibbo Tools
Sources
- California Privacy Protection Agency — Information for Data Brokers / DROP. cppa.ca.gov
- California Privacy Protection Agency — DROP system requirements, effective January 1, 2026. cppa.ca.gov
- California Privacy Protection Agency — Data Broker Registry, including DROP processing from August 1, 2026. cppa.ca.gov
- California Attorney General — CCPA data-broker FAQ. oag.ca.gov