Your home address, your purchasing habits, your precise location on a Tuesday afternoon — it’s all sitting in a database right now, owned by a company you’ve never heard of, being sold to anyone willing to pay. That’s not paranoia. That’s the data broker industry in 2026, operating largely in the dark, quietly profiting off the raw material of your life. California just gave its residents a direct line to fight back, and if you live there and haven’t used it yet, you’re leaving real protection on the table.
The tool is called DROP — Delete Request and Opt-out Platform — and it does exactly what its name suggests. File one request at privacy.ca.gov, and you’ve formally told every data broker registered in California to delete your information and stop selling it. According to the Electronic Frontier Foundation, a single DROP request currently reaches 614 registered brokers. That’s not a workaround or a loophole — it’s legally enforceable muscle backed by California’s Delete Act.
The facts:
- California’s DROP platform launched on January 1, 2026, and enforcement begins August 1, 2026.
- A single DROP request reaches 614 data brokers registered in California as of publication.
- After August 1, brokers have 45 days to address deletion requests under the platform’s rules.
- Data brokers collect names, addresses, phone numbers, purchasing habits, web browsing history, precise geolocation data, and health information.
- The platform is free, state-run, and currently available to California residents only.
What DROP Actually Does — and Why the August 1 Date Is the One That Matters
DROP officially went live in January, but that’s not the deadline you should care about. August 1 is the date data brokers are legally required to connect to the platform and start processing requests. File before then, and you’re first in the queue the moment compliance kicks in. Wait, and you’re just adding yourself to a backlog that will only grow.
Tom Kemp of Cal Privacy described the mechanics plainly: visit the site, verify California residency, enter basic personal information, hit submit. That’s it. Starting August 1, brokers must connect into the system and delete matching data. The Desert Sun notes brokers technically have 90 days to fully process requests, while EFF cites 45 days — the discrepancy likely reflects different phases of compliance, but either way, the clock starts on August 1.
The scope of what brokers collect is genuinely staggering. As Kemp put it, “all this information gets collected and turned around and sold to basically anyone with a credit card.” That includes social media activity, precise geolocation, and health data. These aren’t abstract data points. This is a map of your actual life, built without your consent and monetized without your knowledge.
Not everything gets deleted — the law carves out exemptions for public records, certain health information, fraud prevention data, and legal compliance needs. That’s a real limitation, and anyone who tells you DROP is a complete privacy reset is overselling it. But getting your data scrubbed from 614 brokers in one click is still a significant win compared to the alternative, which is filing hundreds of individual opt-out requests manually — a process so tedious that almost no one actually does it.
The Honest Problem With Tools Like This
Here’s the take that doesn’t get said enough: California’s DROP is a good tool operating in a broken system, and treating it as a solution rather than a patch is a mistake. The data broker industry exists because there are no meaningful federal privacy protections forcing these companies to ask your permission before collecting your data in the first place. DROP lets you claw back some of what’s already been taken. It doesn’t stop the collection from starting again tomorrow.
Data brokers will continue harvesting. New ones will enter the market. The registry will expand, but so will the industry’s appetite. The cost of running infrastructure to support mass data collection keeps dropping — something our own coverage of AI data center economics makes painfully clear. Cheap compute means cheap surveillance. California has built a better opt-out mechanism, but opt-out frameworks still place the burden on the consumer, not the industry doing the damage.
The Delete Act, which created DROP, was a hard legislative fight — EFF was vocal in pushing for it, and that advocacy mattered. But framing a deletion request as the primary vehicle for privacy protection lets Congress off the hook entirely. What we actually need is an opt-in standard at the federal level. What we have is California offering residents a form to sign after the damage is already done.
Should You File a DROP Request Right Now?
Yes. Unambiguously yes. The limitations of the system don’t change the math. Filing takes minutes. The legal obligation it creates on 614 companies is real. If you’re a California resident and you care even slightly about who has access to your location history, your health data, or your browsing behavior, there is no rational argument for not using this tool.
The broader privacy fight — federal legislation, platform accountability, the kind of structural change that actually shifts power away from data brokers — is ongoing and slow and deeply political. It connects to the same extractive logic you see in industries far beyond tech, from carbon trading markets to platform monopolies. The incentives are built to favor the collectors, not the collected.
That fight is worth having. Meanwhile, the DROP request is available right now, it’s free, and it has legal teeth. The platform lives at privacy.ca.gov. August 1 is close. Filing today means you’re not waiting on anyone’s goodwill — you’re on record, and California law is behind you.
If you live in California, filing a DROP request before August 1, 2026 is the single most effective privacy action you can take this year — and the fact that you even need to take it says everything about how broken the status quo actually is.
