Removed: the personal information brokers hold on residents who asked for deletion, on a 45-day cycle, with identifiers hashed on entry so the platform itself holds no raw personal information.
Outcome: DROP opened to residents in January 2026; from 1 August 2026 every registered broker — over 600 of them — must download and action pending requests, and a broker that fails to delete draws $200 per day, per request.
California has put a clock and a price on deletion. DROP, the deletion platform the Delete Act required, opened to residents in January 2026; from 1 August 2026 every registered data broker — over 600 of them — must download pending deletion requests at least once every 45 days, delete the matching personal information, and report back; a broker that fails to delete draws $200 per day, per request.
The design detail worth copying is how little the platform holds: identifiers are hashed on entry, so “no raw personal information is stored in DROP or ever shared with data brokers”, and brokers hash their own records to match.
Sources: