The California Privacy Protection Agency (CPPA) has unveiled a privacy dashboard that allows consumers to request deletion of their personal information from all data brokers in one swoop. The Delete Request and Opt-Out Platform (DROP) also includes a more complicated dashboard for data brokers, which reflects the many detailed steps brokers must take to fulfill their obligations to process deletion requests every 45 days, starting in August 2026. Last week, the CPPA announced at its public board meeting that California’s administrative law office approved DROP regulations, which are now in effect. This article examines how DROP will work for both consumers and data brokers and presents hurdles that could impact functionality for each. It includes details revealed during the CPPA’s presentations and insights shared with the Cybersecurity Law Report by the Network Advertising Initiative and a privacy design expert. See “California’s Delete Act Enforcement Sweep Takeaways” (Apr. 2, 2025).

