California's Delete Act requires data brokers to delete consumer data via DROP by Aug 1 2026

Qué ocurrió

The 2023 Delete Act gives Californians a single deletion request right through the DROP platform. Data brokers must have deleted all valid requests submitted before August 1 2026 and must process each request within 90 days, with a 45‑day re‑check for new matches. Some records are exempt, such as public records.

Por qué es importante para la confianza y el cumplimiento

• Its status is announced. It is not law yet. Track it, but do not treat it as an obligation.
• The guidance explains how California’s law forces data brokers to honor consumer deletion requests, highlighting compliance deadlines and exemptions.
• Takes effect August 1, 2026.

Who is affected

Recommended actions

1. Check that privacy notices describe the practices this addresses.
2. Confirm access, correction, deletion and opt-out requests are handled within the required time.
3. Map the security requirements to existing controls and close gaps.
4. Confirm handling of sensitive data categories meets the stricter rules.