According to Ars Technica, California’s new DROP (Delete Request and Opt-out Platform) law took effect on January 1, creating a single, centralized way for residents to stop data brokers from hoarding and selling their personal information. This supercharges the state’s 2022 Delete Act, which required brokers to let people see and delete their data but forced residents to file a separate demand with each of the more than 500 active data broker companies. A report by Consumer Watchdog found that only 1 percent of Californians used their rights under the old law in its first 12 months, largely because the process was so burdensome. Now, through the state’s California Privacy Protection Agency platform, a single registration will forward a deletion and future collection ban to all registered brokers. These brokers, as detailed in a Consumer Watchdog report, trawl sources from automakers to fast-food chains for financial details, family situations, and countless other personal data points on millions of people.
Why This Changes Everything
Look, the old system was basically a privacy rights placebo. It sounded good on paper—”you have the right to delete!”—but it was designed to fail. Who has the time to hunt down and file requests with hundreds of shadowy companies? The 1 percent usage rate proves it. The DROP law is the first real attempt to make the right to deletion a practical, usable tool for normal people, not just privacy nerds. It acknowledges a fundamental truth: if exercising a right is a massive pain, you don’t really have that right.
The Broker Backlash and What’s Next
So, data brokers are obviously not thrilled. Their entire business model thrives on obscurity and friction. A streamlined, one-stop-shop deletion tool is their nightmare. Here’s the thing, though: I think this is just the beginning of the squeeze. California often sets the tone for national policy, and other states—or even the federal government—will be watching this experiment closely. If it works, and a significant portion of California’s 40 million residents start using it, we could see a domino effect.
But let’s be a little skeptical. The law’s success hinges on enforcement and broker compliance. Will all 500+ brokers properly honor these bulk requests? Will the state have the resources to crack down on those that don’t? And there’s a bigger, looming question: in a world where data is the new oil, can a tool like this actually stem the tide, or is it just a more convenient bucket for a leaking ship? The trajectory is clear, though. The era of completely frictionless data exploitation is ending. Tools like DROP represent the next phase: making privacy actionable. It’s a major step from principle to practice.
