$1 million insurance against identity theft
Remove personal info from 120+ data brokers
Fight back against AI deepfakes and scams
Secure and protect your family’s data
Block spam calls and robocalls instantly
A secure and private way to pay
Browse the internet privately and safely
Real-time alerts for dark web exposures
Never give out your personal info again
Alias management powered by AI
© Cloaked. 2025
California Delete Act compliance isn't waiting for 2026. This guide shows how anyone can automate DROP-ready deletions today with Cloaked.
The California Delete Act represents a seismic shift in data privacy rights, fundamentally changing how consumers can control their personal information across the data broker ecosystem. On October 10, 2023, Governor Newsom signed SB 362 into law, creating what will become the nation's first centralized deletion mechanism.
At its core, a data broker is "a business that" you don't directly interact with but that buys and sells information about you from other businesses. These companies operate in the shadows of the digital economy, trading your personal data without your knowledge or consent.
The DELETE Request & Opt-out Platform (DROP) will transform this landscape. By January 1, 2026, the California Privacy Protection Agency must establish this accessible deletion mechanism, allowing consumers to request deletion from all registered data brokers through a single portal. This isn't just convenient; it's revolutionary for consumer privacy protection.
The California Privacy Protection Agency has been actively shaping the regulatory framework for DROP throughout 2025. On July 31, 2025, the Agency noticed modifications to the text of proposed regulations, marking a critical milestone in the rulemaking process.
The most significant requirement for data brokers comes into effect on August 1, 2026. Beginning that date, data brokers must access the DROP system at least once every 45 days to process deletion requests. This 45-day window isn't optional; it's a mandatory compliance checkpoint that will fundamentally change how brokers handle consumer data.
The scope of these requirements is staggering. The Agency is requesting $2.477 million in 2025-26 and $2.34 million in 2026-27 for contracting costs and additional positions to oversee the technical and program requirements of DROP. This substantial investment underscores the platform's complexity and importance.
The California Privacy Protection Agency isn't waiting for 2026 to flex its enforcement muscles. Starting January 1, 2025, monetary damages range from $107 to $799 per consumer per incident, with administrative fines reaching $2,663 per violation, or $7,988 for intentional violations.
Recent enforcement actions demonstrate the CPPA's commitment to accountability. In February 2025, the CPPA sought a $46,000 fine against National Public Data, a Florida-based data broker, for failing to register and pay required fees. This case arose after the company reportedly exposed 2.9 billion records in a data breach.
The penalty for failing to register is $200 per day, a figure that can quickly escalate into substantial financial liability. As Michael Macko, the Agency's head of enforcement, stated: "We will pursue data brokers who violate the law, plain and simple."
While the state's DROP platform won't launch until 2026, Cloaked scans databases of data brokers across the web for personal information including name, phone number, and address, giving you insights about your level of personal online privacy. This proactive approach already aligns with DROP's core mission.
The 45-day deletion requirement beginning August 1, 2026 matches the platform's existing verification cycles. Once DROP requires data brokers to delete all personal information every 45 days, users will already have established deletion patterns in place.
The financial case for automation is compelling. Manual DSR processing costs about $800K per million consumer identities annually. By contrast, automated solutions can reduce these costs by over 90% while ensuring consistent compliance. With 246% increase in deletion requests from 2021 to 2023, manual processing is no longer sustainable.
The DROP system will employ a robust verification process to ensure consumer residency is verified and their contact information is authenticated securely. The platform already generates these audit trails automatically.
Beginning January 1, 2028, data brokers must undergo independent third-party audits every three years to determine compliance. The persistent follow-up system and comprehensive logging ensure you'll have documentation ready when auditors come knocking. The system tracks deletion request volumes and response times, creating an evidence trail that demonstrates ongoing compliance.
Getting started with Cloaked's bulk deletion service takes just minutes. Cloaked helps you generate digital identities for every part of your online life while simultaneously removing your existing data from broker databases.
First, create your Cloaked account and complete the initial privacy scan. The platform will identify which data brokers currently hold your information. Next, authorize Cloaked to submit deletion requests on your behalf, a single click replaces what would otherwise require contacting hundreds of brokers individually.
Once activated, the system continuously monitors for data re-collection. Beginning August 1, 2026, when data brokers must check DROP every 45 days, your initiated requests will already be in their deletion queues. The July 31, 2025 modifications to DROP regulations confirm that automated deletion services align with the state's vision for streamlined privacy protection.
With DROP's launch approaching, here's your action timeline. The Overview of SB 362 provides the regulatory framework, but practical preparation starts now.
January 2025: Begin documenting your current data broker footprint. February-March 2025: Initiate deletion requests with major brokers through Cloaked. April-June 2025: Monitor compliance and track which brokers honor your requests. July-December 2025: Establish your recurring deletion pattern before DROP goes live.
The CPPA anticipates DROP availability starting January 1, 2026, but data brokers won't be required to access it until August. This six-month window gives you time to ensure your deletion requests are already in the system. Beginning August 1, 2026, the 45-day compliance cycle becomes mandatory, making pre-launch preparation essential.
Not all data brokers comply willingly. When you encounter resistance, the CPPA has established clear escalation paths. "Californians have a right to know" who is trafficking in their personal information, as enforcement head Michael Macko emphasizes.
First, document all communication with non-compliant brokers. Screenshot their responses, save emails, and maintain a timeline of your requests. The CPPA's enforcement division is conducting public investigative sweeps of data broker compliance, and your documentation becomes evidence.
File your complaint directly with the CPPA through their online portal. Include your documentation and specify which requirements the broker violated. With daily fines of $200 for non-compliance, the CPPA has significant leverage to compel cooperation. The agency has already demonstrated willingness to pursue violators across state lines.
The California Delete Act represents a watershed moment for consumer privacy, but waiting until 2026 to take action means missing critical opportunities for protection. Cloaked ensures compromised digital identities from your past won't come back to haunt you, starting today, not years from now.
By initiating your deletion requests through Cloaked's comprehensive scanning system now, you're not just preparing for DROP; you're actively protecting your privacy during the crucial pre-launch period. The platform's ability to generate secure digital identities for different online activities means you can compartmentalize your data footprint while old information gets permanently deleted.
Don't wait for the state's portal to protect your privacy. Start your automated deletion journey with Cloaked today, and when DROP launches in 2026, you'll already be steps ahead in the fight for data privacy. Visit Cloaked's data removal features to begin your comprehensive privacy protection immediately.
