What DROP is
The California Privacy Protection Agency runs DROP, the Delete Request and Opt-out Platform. A registered data broker uses it to download consumer deletion lists, work those requests in its own systems, direct service providers who hold copies, and report a status back.
Cadence
The published cadence is a calendar, not a one-time project. Beginning August 1, 2026, the agency's materials say a broker accesses DROP at least once every 45 days. Assembly Bill 883 changes that interval: starting January 1, 2027, the published requirement moves to at least once every 30 days. Confirm the current text with the statute and the agency before you plan a window. This note is not legal advice.
A practical cycle
A practical cycle looks like this:
- Download the deletion lists for the identifiers you selected.
- Match and process them in your own systems.
- Tell each vendor who stores a copy what to do, and keep their answer.
- Report a status for each request.
- Start the next window on time.
What this note does not decide
Drop Ledger does not sign in to DROP, and it does not decide whether a window was met. It helps you organize the batch, the vendor replies, and the file you export when the window closes.