Accessible Deletion Mechanism – Delete Request and Opt–out Platform (“DROP”) System Requirements

In 2023, the Legislature passed the Delete Act (Senate Bill (SB) 362, Chapter 709, Statutes of 2023), which requires the Agency to establish an accessible deletion mechanism that allows consumers to request from registered data brokers the deletion of all non–exempt personal information related to the consumer through a single deletion request to the Agency. On September 26, 2025 the California Privacy Protection Agency adopted regulations on the subject of the Accessible Deletion Mechanism.

Effective Date: January 1, 2026

Status of the Proposal: The rulemaking is complete. On November 6, 2025, the regulations were approved by the Office of Administrative Law and filed with the Secretary of State.

Rulemaking Documents

November 6, 2025 – Final Rulemaking Documents

July 31, 2025 – Public Notice of Modifications to Proposed Regulations

April 25, 2025 - Public Notice of Rulemaking and Related Documents

Public Comments

Comments received during the initial (April 25, 2025 – June 10, 2025) comment period are linked below.

Comments received during the July 31, 2025 – August 18, 2025 comment period are linked below.

Preliminary Rulemaking Activities

The California Privacy Protection Agency solicited preliminary written comments from the public via an Invitation for Preliminary Comments on Proposed Rulemaking on the following topics: Verifiable Consumer Requests, Privacy–protecting, Status of Request, and Consumer Experience from May 31, 2024 through June 25, 2024. That period is now closed, and the public comments are available via the links below.

Preliminary Public Comments

Comments received during preliminary public comment period can be found here.

Transcripts

Webcasts