California Delete Act · DROP

DROP cycles, run inside your own systems.

DropOps pulls CalPrivacy's deletion lists, deletes or opts out the matching records, and reports back. It runs in your environment, so consumer data never leaves it.

Book a 20-minute call How it works

What the law requires

For every registered data broker, since August 1, 2026.

45 daysBetween list downloads, and to report each status (30 from 2027)
$200/dayPenalty for each request not deleted
2028Compliance audits begin, every three years

How it works

Set up once, then it runs on a schedule. Nothing changes until you approve it.

  1. DownloadPull your deletion lists from DROP.
  2. MatchHash your records with CalPrivacy's rules and review a dry run of every planned change.
  3. Delete and reportOn approval, delete or opt out, notify your service providers, and report a status for every request.

Architecture

DropOps runs inside your environment, next to your data. The only thing that goes back to CalPrivacy is a request ID and a status code.

CalPrivacyDROP
→↓Hashed deletion lists
←↑Request ID + status code
Your environment
DropOps
⇄⇅
Your data

What's included

Built for small and mid-sized brokers without a large privacy platform.

Audit trail

A log of every cycle, with no personal data, ready for an auditor.

Deadline tracking

Due dates and early warnings for every download and report.

Ongoing screening

New data is checked against past deletion requests before you store it.

Fixed price

A setup fee and a monthly fee. No per-record pricing.

Talk it through

You work directly with the engineer who builds and runs your setup. Tell me where your data lives and how you handle DROP today; in 20 minutes you'll know what a setup looks like.

Book a 20-minute call mustafa@getdropops.com