California Delete Act · DROP

DROP cycles, run inside your own systems.

DropOps downloads CalPrivacy's deletion lists, matches them against your records, deletes or opts out the matches, and reports a status for every request. It runs in your environment, so consumer data never leaves it.

Book a 20-minute call How it works

What every registered broker now has to do

Since August 1, 2026, registered data brokers have to process DROP deletion requests on a fixed schedule.

45 daysMaximum time between list downloads
45 → 30Days to report each status; set to shrink to 30 from January 2027
$200/dayPenalty for each request not deleted
2028Independent compliance audits begin, every three years

How it works

One repeatable cycle, set up once and then run on schedule. Nothing is deleted or uploaded until you approve it.

  1. DownloadPull your selected lists from DROP: name + date of birth + ZIP, email, phone, mobile ad ID, name + VIN, connected-TV ID.
  2. Standardize and hashNormalize your records with CalPrivacy's rules and hash them with SHA-256, tested against CalPrivacy's published examples.
  3. Match and reviewA dry run shows exactly what would be deleted, opted out or reported as not found before anything changes.
  4. Act and reportDelete or opt out on approval, notify service providers, and upload a status for every request.
  5. Keep it cleanA suppression list screens newly acquired data, and statuses are amended within 45 days when a "not found" later matches.

What's included

Runs in your environment

Your databases, warehouse or files stay where they are. I never receive your raw consumer data.

Audit trail

A tamper-evident log of every cycle with no personal data in it, ready to show an auditor.

Deadline tracking

Clear due dates for the next download and the next report, with early warnings.

Fixed price

A fixed setup fee and a monthly fee. No per-record pricing and no enterprise platform contract.

Built for

  • Small and mid-sized registered brokers
  • Marketing list, lead-gen, people-search and data-enrichment companies
  • Teams without a large privacy platform

What I don't do

  • Give legal advice. Exemptions and policy stay with your counsel.
  • Take custody of your consumer data

Who you'll work with

You work directly with me, the engineer who builds and runs your setup. No account managers, no hand-offs. DROP compliance is a data engineering problem: exact standardization, hashing at scale, pipelines that are safe to re-run, and a clean audit trail. That's the work.

Talk it through

Tell me how you handle DROP today and where your data lives. I'll tell you what a setup would look like, plainly, in 20 minutes.

mustafa@getdropops.com