Your Guide to the California Delete Act 2026

On August 1, 2026, the California DELETE Act's Data Removal Option Portal — known as the DROP portal — went live. For the first time, California consumers can submit a single opt-out request that reaches all registered data brokers in the state at once.

This is a significant shift in how privacy rights work in California, and it has implications for both consumers and businesses. Here's what you need to know.

What Is the California Delete Act?

The California Delete Act (SB 362) was signed into law in 2023, expanding on the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). Its core goal: make it easier for consumers to exercise their right to have personal data deleted from data broker databases.

Before the Delete Act, exercising your CCPA deletion rights meant submitting individual requests to each data broker — a time-consuming, fragmented process with no central point of contact.

What Does the DROP Portal Do?

The DROP (Data Removal Opt-out Portal) is a centralized government-run platform operated by the California Privacy Protection Agency (CPPA). As of August 1, 2026:

• California consumers can submit a single deletion request that applies to all data brokers registered with the state

• Registered data brokers are legally required to honor requests submitted through the portal

• Brokers must delete the data and also opt consumers out of future data sales and sharing

• The portal applies to brokers registered under California law — currently the most comprehensive data broker registry in the US

What It Means for Consumers

If you are a California resident, the DROP portal gives you a meaningful new tool. One request, properly submitted through the portal, triggers legal obligations for every registered data broker to delete your information.

That said, a few important caveats apply:

• The portal covers brokers registered with the California CPPA. Unregistered brokers — and brokers based entirely outside California's jurisdiction — are not covered.

• Compliance timelines vary. Brokers have a set window to process deletion requests; data does not disappear overnight.

• Re-listing remains a risk. Even after deletion, some brokers re-list data they collect again through new sources. Ongoing monitoring is still necessary.

• The portal covers California residents only. Consumers in other states must still navigate individual broker opt-out processes.

The DROP portal is a genuine step forward, but it is not a complete solution. Many consumers find the process confusing or uncertain about whether their request has been processed correctly.

What It Means for Businesses

If your business buys, sells, or otherwise trades in personal data about California consumers, the Delete Act raises your compliance obligations significantly.

Are You a Data Broker Under California Law?

California's definition of "data broker" is broad. It covers any business that knowingly collects and sells or shares personal information of consumers with whom the business does not have a direct relationship. If that describes any part of your revenue model, you are likely covered.

Covered businesses must:

• Register with the CPPA as a data broker

• Honor deletion requests submitted through the DROP portal within the required timeframe

• Maintain documented processes for honoring opt-out rights

• Face significant penalties for non-compliance — up to $200 per day per violation

Even businesses not formally classified as data brokers should review their data practices. The Delete Act operates alongside CCPA/CPRA requirements that apply to many businesses collecting California consumer data.

How National Consulting Group Can Help

Whether you are a consumer trying to navigate the new DELETE Act process or a business assessing your compliance obligations under California law, National Consulting Group is here to help.

For consumers: We can supplement the DROP portal with targeted opt-out requests to brokers not covered by the state registry, monitor for re-listing, and handle the process from start to finish so you don't have to navigate it yourself.

For businesses: Our CCPA compliance consulting covers what the Delete Act now requires — from reviewing your data practices and registration obligations to building the internal processes you need to honor deletion requests at scale.

Book a Free Consultation

If the California Delete Act affects you — as a consumer or a business — book a free consultation with National Consulting Group. We'll walk through your specific situation and explain exactly what you need to do.

Book at national-consulting-group.com/book-online.