Delete Request and Opt-out (DROP) Platform
What is the DROP Platform?
The DROP Platform is a statewide system created under the Delete Act to let consumers submit a single, verified request to delete their personal information or opt out of data brokering across all registered brokers. The CPPA authenticates consumers, distributes requests to brokers, and ensures that each request is processed consistently.
Why does the DROP Platform matter?
Before DROP, consumers had to identify and contact data brokers individually, often without knowing which companies held their data. The DROP Platform centralizes this process, giving consumers an efficient way to manage data removal and opt-out actions. It improves access to privacy rights and supports stronger transparency requirements for entities that collect information without direct consumer interaction.
FAQs about Delete Request and Opt-out (DROP) Platform
Consumers use a single interface to submit a deletion or opt-out request that automatically reaches every registered data broker. This reduces time, effort, and uncertainty.
Consumers typically must verify their identity to prevent unauthorized deletion or opt-out actions.
Yes. Registered brokers must receive, acknowledge, and process requests sent through the platform.
Requests apply only to registered data brokers, but brokers must honor the request for every dataset they control or distribute.
Yes. The platform supports deletion requests and opt-out requests related to sale or sharing of personal information.
Timelines follow CPPA rules, requiring prompt processing and verification.
The platform may allow withdrawal or revision once verification is complete, depending on CPPA guidance.
Only the broker’s own datasets must be deleted. Other companies holding broker-supplied data fall under their own obligations.