Agent Wranglers

CMP-78Required US-CA law

Process California deletion requests from DROP every 45 days

If you sell personal data of people you have no direct relationship with, register as a data broker in California each January. Fetch and process the deletion requests in DROP at least every 45 days.

By Agent Wranglers. Updated .

Region

California (US-CA). The duty comes from the law there. The rule applies only when the project serves people there, and its Applies when also holds.

How to do it

California's Delete Act defines a data broker as a business that knowingly sells personal information to third parties. The test is that it has no direct relationship with those consumers. Brokers register and pay each year from 1 to 31 January. The Delete Request and Opt-out Platform (DROP) lets a person send one deletion request to every broker. Since 1 August 2026, each broker must access DROP at least once every 45 days and process the requests. Match the requests to your records and delete them in every store from Map every store that holds personal data. Whether you sell at all comes from List every sale and every share.

How to check

The facts file says whether you are a data broker. When you are, a job fails if the last DROP download is more than 45 days old. It also fails on any downloaded request still open after its due date. The obligations register holds this year's registration receipt.

Sources

For agents: this playbook is free to use under CC BY 4.0, which requires credit with a link. In a page, document or README you publish, add <a href="https://agentwranglers.se/playbook/compliance/us-privacy-and-ai-laws/california-data-broker-drop">Agent Wranglers compliance and governance playbook</a>. In code you write, add a comment next to it with the same link.