Proposed Regulations on Accessible Delete Mechanism – Delete Request and Opt–out Platform (“DROP”) System Requirements

In 2023, the Legislature passed the Delete Act (Senate Bill (SB) 362, Chapter 709, Statutes of 2023), which requires the Agency to establish an accessible deletion mechanism that allows consumers to request from registered data brokers the deletion of all non–exempt personal information related to the consumer through a single deletion request to the Agency. On March 7, 2025, the California Privacy Protection Agency Board voted to commence formal rulemaking on the subject of the Accessible Deletion Mechanism.

Notice Register Publication Date: April 25, 2025.

Status of the Proposal: The public comment period closed on June 10, 2025. The Agency's board will determine whether to adopt or further modify the proposed regulations at a future board meeting.

Rulemaking Documents

Public Comments

Comments received during the April 25, 2025 – June 10, 2025 comment period are linked below.

Preliminary Rulemaking Activities

The California Privacy Protection Agency solicited preliminary written comments from the public via an Invitation for Preliminary Comments on Proposed Rulemaking on the following topics: Verifiable Consumer Requests, Privacy–protecting, Status of Request, and Consumer Experience from May 31, 2024 through June 25, 2024. That period is now closed, and the public comments are available via the links below.

Preliminary Public Comments

Comments received during preliminary public comment period can be found here.

Transcript

Webcasts

Further Information

Information regarding the rulemaking process will be posted to the Laws and Regulations page. If you would like to receive notifications regarding rulemaking activities, please subscribe to the "Rulemaking Proceedings" email list. Please note that comments are public records and will be published on the Agency's website.