How to Use California DROP: Step-by-Step Sign-Up Guide

DROP, the Delete Request and Opt-out Platform, lets a California resident send one deletion request to every data broker registered with the state. It is run by the California Privacy Protection Agency (CalPrivacy) under the Delete Act, SB 362. This guide walks through the sign-up as CalPrivacy describes it today, what to enter, what to do when verification fails, and what to expect afterward. Our original review covers what happened when we used it on launch day.

Before You Start

• You must live in California. CalPrivacy says DROP is only available to California residents.
• It is free. The official DROP page says the agency will never charge you to use it. Any site asking for payment to "file DROP for you" is not DROP.
• Gather your identifiers. Every former name, email address and phone number you have used. More identifiers give brokers more chances to match your records.
• Use the official address. Start at privacy.ca.gov/drop, which links to the consumer portal at consumer.drop.privacy.ca.gov.

Step 1: Verify Your California Residency

DROP checks residency through the California Identity Gateway, a state identity service. According to the DROP page, you have two options:

• Enter your information directly. You give basic details such as your name and date of birth, and the gateway tries to confirm your residency with state records. You do not need to create a gateway account.
• Sign in with Login.gov. CalPrivacy suggests this only if you already have a Login.gov account.

CalPrivacy says the information you give the gateway is used only to verify you, is not stored afterward, and is not passed to DROP.

If you see "Unable to verify"

The DROP help page says to recheck every field and try again first. Typos in a date of birth or a recent move are common causes. If it still fails, click the on-screen link to "Request a review of your eligibility." You give basic residency details and the team answers by email. A law-firm summary of the final regulations says residency reviews are handled within 10 calendar days.

Step 2: Build Your Profile

This is the information brokers will try to match against their records. According to How DROP works, name, date of birth and ZIP code are enough to submit. The optional fields are where most of the value is:

• Names: include maiden names and other names you have used. You can list more than one.
• Email addresses and phone numbers: add old ones too. Brokers often key records on these.
• Mobile advertising IDs (MAIDs): the ad identifier on your phone. Location and ad-tech brokers use these.
• Connected TV IDs and vehicle identification numbers: useful if you want brokers that trade smart TV or car data to find you.

You can list multiples of everything except date of birth. CalPrivacy says DROP stores this data in hashed form and uses it only to process requests. Brokers receive hashed values and compare them against hashed versions of their own records, as described in CalPrivacy's explainer on deletions.

Step 3: Choose Brokers and Submit

By default your request goes to every data broker active in DROP, now and in the future. CalPrivacy counted 654 enrolled brokers as of August 25, 2026. If you want a specific broker to keep your data, you can uncheck it on the data broker list page inside DROP. Most people leave every box checked.

When you submit, the confirmation page shows an 8-digit DROP ID. Save it somewhere safe. You need it to check your status, and CalPrivacy asks you not to share it. If you lose it, you can request it by email.

What Happens After You Submit

Under Civil Code section 1798.99.86, registered brokers have had to access DROP at least once every 45 days since August 1, 2026. They have 45 days from receiving a request to process it. After that, they must delete newly collected data about you at least every 45 days, unless an exemption applies.

CalPrivacy says it can take up to 90 days to see your status updated in DROP. Statuses are reported broker by broker. We explain each one, and what to do next, in California DROP Status Explained.

One thing to keep in mind: a status of "Pending" or even a submitted request is not a removal. A record counts as deleted when the broker reports it deleted, and even then, brokers can keep some data under the exemptions covered in What Data Brokers Can Keep After a DROP Request.

Updating Your Request Later

DROP is ongoing, not a one-time filing. If you change your name, phone number, email, device or car, you can add the new details to your profile. The help page says profile updates are allowed once every 45 days, which lines up with the brokers' 45-day cycle.

Filing for Someone Else

CalPrivacy says you can file for another person in some cases, such as a parent for a child or a family member for an elderly relative. The other person's California residency still has to be verified. Details are on the help page.

If You Do Not Live in California

DROP will not accept you, and we have not found another state that offers an equivalent single request. Your options are to send deletion requests to each broker yourself, or have a service send them. See Don't Live in California? Here's How to Remove Your Data Anyway and our state privacy laws guide.

Frequently Asked Questions

How long does it take to sign up for DROP?

CalPrivacy describes it as a request that takes under 10 minutes. Waiting on an eligibility review takes longer if the gateway cannot verify you on the first try.

Do I need to give DROP my street address?

No. CalPrivacy's list of profile fields asks for name, date of birth and ZIP code, with optional email, phone and device identifiers. The residency check happens separately through the California Identity Gateway.

Do I have to file again every year?

No. CalPrivacy says DROP is ongoing. Brokers must keep deleting matching data on a 45-day cycle, and new brokers that join DROP are included unless you narrow your request.

Is DROP the same as a CCPA deletion request?

They rest on related laws, but DROP is one request routed to every enrolled broker. A CCPA request goes to one business at a time. If a broker still lists you after DROP, a direct written request is a good next step. Here is how to write one.