CPPA Opens Public Comment Period for Proposed DROP Regulations

SACRAMENTO, CA — The California Privacy Protection Agency (CPPA) today opened the formal public comment period for the Agency's proposed Delete Request and Opt-out Platform (DROP) regulations. Public comments will be accepted from April 25-June 10, 2025. The period will conclude with a hybrid (in-person and virtual) public hearing on Friday, June 10.

The draft regulations are part of the Agency's rulemaking process on the forthcoming accessible deletion mechanism mandated by the Delete Act — referred to as DROP. Set to launch in 2026, DROP is a tool that will allow California residents to delete their personal information held by CPPA-registered data brokers in a single request.

“DROP is a groundbreaking revolution in enabling the exercise of privacy rights at scale and in an easy-to-use manner, ” said CPPA Executive Director Tom Kemp. “These proposed regulations reflect our commitment to ensuring that the DROP system is practical and accessible for Californians, as well as intuitive for the regulated community.”

Members of the public, data brokers, consumer advocates, and all other stakeholders are encouraged to submit comments and participate in the rulemaking process. The full text of the proposed regulations, along with supporting rulemaking documents, are available on CPPA's website.

Written comments may be submitted by email or mail as specified in the notice of proposed rulemaking. The public may also submit oral comments for the record during the hybrid public hearing on June 10 from 1-3 p.m. Members of the public may attend the meeting in person at the Cannabis Control Appeals Panel Hearing Room located at 400 R Street, Suite 330 in Sacramento, or virtually via the meeting Zoom link.

For more information on DROP rulemaking and to stay up-to-date on the DROP regulations, please visit the Agency's Laws & Regulations page.

About Us

The California Privacy Protection Agency is committed to promoting the education and awareness of consumers' privacy rights and businesses' responsibilities under the California Consumer Privacy Act.

Individuals can visit privacy.ca.gov to access helpful and up–to–date information on how to exercise their rights and protect their personal information. In addition, the Agency's website provides important information about CPPA board meetings, announcements, and the rulemaking process.