California’s New Delete Request Tool Impacts Data Brokers and Residents

According to Hunton Andrews Kurth, California’s Privacy Protection Agency adopted regulations on September 26, 2025 governing the Delete Request and Opt-Out Platform (DROP), a tool designed to enable consumers to request deletion of all non-exempt personal information from registered data brokers through a single deletion request to the CPPA. Under the California Delete Act, the DROP will be available to consumers by 1 January 2026.

From 1 August 2026, data brokers must access the DROP system every 45 days to retrieve and process deletion requests. The article notes that the regulations are intended to address the Act’s requirement for an accessible deletion mechanism, with compliance obligations outlined in the CPPA’s Final Statement of Reasons and Update to Informative Digest. Readers are directed to Privacy & Information Security Law Blog for further read-through on the regulatory framework.