California DROP Tool Centralizes Personal Data Deletion

As reported by Hayley Tsukayama on EFF Deeplinks, the DROP (Delete Request and Opt-out Platform) tool provided by the state of California is attracting attention as a new means of personal data protection. This tool allows users to request the deletion of personal information and cessation of its sale from all data brokers registered in the state with a single application.

Basic Functions of DROP

A DROP request offers the functionality to request deletion of personal information from databases and cessation of the sale or sharing of that information from all businesses registered in the California Data Broker Registry. Currently, a single DROP application can reach 614 brokers.

Data brokers are companies that collect information about individuals, repackage it, and sell it. Names, addresses, phone numbers, email addresses, purchase histories, and more are often collected and traded.

Following an application, data brokers are required to respond within 45 days starting August 1, 2026. While the DROP tool itself officially launched on January 1, 2026, businesses were given a preparation period until August 1 of the same year. Anyone submitting an application now can benefit from the early stages of this system.

Background of the Legal Amendment

EFF has supported the creation of the law that produced this DROP tool, known as the Delete Act. Consumers in California already had the right to request businesses delete their information and the right to refuse the sale of their information.

However, a practical challenge was that exercising these rights was extremely cumbersome and time-consuming. Since data brokers buy, sell, and exchange information among themselves, it was difficult for consumers even to determine which companies they should apply to. The individual application process itself was also burdensome.

DROP streamlines this process by linking these applications with the Data Broker Registry. EFF evaluates that this tool promotes user-friendliness in privacy law and reduces the risks that uncontrolled collection and sale of personal information pose to everyday life.

Practical Benefits for Individuals

Filing a DROP application offers several practical advantages. First, data brokers are a major source providing email addresses and phone numbers to spammers (or companies using similar tactics to spammers). Removing your information from broker lists can be expected to reduce such unwanted messages.

Second, reducing the number of companies holding your personal information directly improves your cybersecurity. The fewer entities that retain your information, the lower the risk of data breaches due to hacking.

Third, it allows you to exercise stronger control over how your personal information is collected and used. Unless you opt out, data brokers may sell your personal information to malicious companies.

Significance and Challenges of the System

California’s DROP tool is positioned as an initiative to enhance the effectiveness of consumer privacy protection. Under the previous individual application system, dealing with numerous brokers was practically impossible. Establishing a one-stop application portal deserves recognition for lowering the barrier to exercising rights.

On the other hand, some challenges can be pointed out. DROP is only available to California residents; residents of other states cannot use it. Additionally, the system for monitoring whether data brokers are properly processing applications and the effectiveness of penalties for violations require observation of future operational performance.

While 614 companies is a significant number, not all data brokers are registered in the California registry. It is important to note that the system’s coverage has limits and does not guarantee complete data deletion.

Editorial Opinion

The emergence of the DROP tool can be seen as a model case for enhancing the effectiveness of privacy regulation. In the short term, it is highly likely that applications among California residents will increase, leading to direct effects such as a reduction in spam emails and unwanted targeted advertising. It may also prompt consumer groups and legislators in other states to consider similar systems. The data broker industry will face increased compliance costs. From a long-term perspective, the focus will be on whether unified application tools like DROP become widespread across the United States or internationally. Like the one-stop-shop system under the EU’s GDPR, a consolidated portal for exercising privacy rights is theoretically effective, but the hurdles to realization are high in the U.S., where regulation is decentralized. Furthermore, countermeasures against avoidance tactics by data brokers (such as re-collection after deletion) will also determine the system’s sustainability. An inquiry from the editorial desk suggests two technical points. One is the need to develop APIs to automate and verify the processing of DROP applications. If confirmation of receipt and tracking of processing status become possible, consumer trust will further increase.

References

• “Protect Your Privacy with California’s DROP Tool”, by Hayley Tsukayama — EFF Deeplinks, 2026-07-20T21:55:28.000Z (CC BY)
• Source URL: https://www.eff.org/deeplinks/2026/07/what-you-need-know-about-californias-drop-tool