Status labels below are summarized from CalPrivacy’s consumer-facing materials and broker processing page. Confirm reporting rules with the official docs and counsel. This note is not legal advice.
Why status codes matter on a broker desk
After you match and process a consumer deletion list, you report a status for each request in DROP. Consumers see those results against their DROP ID. Clear internal notes next to each status make the next cycle easier to read.
The five statuses CalPrivacy describes
From CalPrivacy’s July 2026 explainer, DROP Data Broker Deletions, How Do They Work?:
- Record deleted. The broker matched DROP identifiers to its records and deleted non-exempt personal information about the consumer.
- Record exempted. The broker matched but is permitted by law to keep the information.
- Record opted out of sale. The broker found multiple consumers associated with the identifier. It may still hold data but can no longer sell or share it.
- Record not found. No match between the DROP identifiers provided and the broker’s records, or the broker did not find a match.
- Pending. The broker has not processed the deletion request yet.
CalPrivacy notes that status updates can take up to 90 days to show for consumers, and that a mix of codes across brokers is normal. That 90-day figure is from the explainer linked above, not a Drop Ledger deadline.
Broker reporting language
The broker Processing DROP requests page lists reportable statuses including Deleted, Opted out, Exempted, and Not found.
Those materials describe reporting within 45 days of downloading the request. Re-check the page when AB 883’s 30-day cadence guidance is updated.
Ongoing changes
CalPrivacy’s processing page also describes amending status later. For example, a Not found that later becomes a match when new data is collected must be handled and re-reported within the published window after you detect the change. Maintain the screening practices your counsel approves.
What to file internally
For each reported status in a cycle, a useful desk record includes:
- Request or list id.
- A high-level match note. Minimize personal data in the evidence pack.
- Whether service providers were directed, if a match required it.
- Vendor acknowledgments or exceptions.
- The time you reported status in DROP.
An internal evidence file is a record of your process, not a legal finding that every downstream system deleted a row.
Where Drop Ledger fits
Drop Ledger organizes vendor acknowledgments and evidence exports around a cycle window. It does not set DROP statuses, access DROP, or decide exemptions.