Skip to content

California DROP: What Your Deletion Status Actually Means

Check a California DROP request, understand deleted, exempted and unmatched records, and know what broker reports can and cannot establish.

By THEYDIDNTASK
AI-generated editorial illustration.

TL;DR

  • —California residents can use the free state DROP service to send an ongoing deletion request to registered data brokers.
  • —A deleted result concerns matching, non-exempt information at that broker. Other statuses have different meanings.
  • —Keep your DROP ID private, allow for reporting delays, and distinguish broker-reported results from an independent audit.

Submitting a deletion request is the beginning of a process. The useful next step is to read what each result actually says.

California's Delete Request and Opt-out Platform, or DROP, lets California residents ask registered data brokers to delete and stop selling their personal information through one free state service. Brokers began processing requests in August 2026. The platform warns that status updates can take up to 90 days.

During its October 12–16 Delete Week campaign, CalPrivacy encouraged existing users to check their progress. That remains a useful task after the campaign ends. A page full of different statuses needs interpretation before it becomes a meaningful privacy record.

Start at the official service

Use the links on privacy.ca.gov/drop to submit or check a request. Confirm eligibility before entering information: this service is for California residents.

The October FAQ explains why information may be requested twice. California Identity Gateway verifies residency separately from the deletion profile. DROP retains the verification result rather than the personal information used for that residency check. The later profile provides identifiers brokers can use to match their records.

This distinction matters when deciding what you are submitting and to which step. Read the instructions on the actual form. Our site does not receive, submit, or check your DROP request.

Read the five statuses separately

CalPrivacy's deletion explainer distinguishes these outcomes:

StatusWhat to take from it
DeletedThe broker reports matching your information and deleting the non-exempt information it holds about you.
ExemptedThe broker has matching information that the law permits it to retain.
Opted-outMatching was insufficient to identify a unique record; the broker may retain information but cannot sell or share it under this result.
Record not foundThe broker may have no information about you, or may not have found a match.
PendingThe broker has not yet processed the request.

These are different answers. Do not add them together and label the total “companies that erased me.” A record-not-found response does not establish that a company never held information, and an exemption is not the same as a deletion failure.

For a private review note, record the broker, status, and date checked. Avoid copying your identifiers into a public spreadsheet or posting a screenshot that includes your DROP ID.

Matching information is a choice

The official walkthrough says a request can be submitted with a name, date of birth, and ZIP code. Other fields can help match records. Mobile advertising IDs, connected-TV IDs and vehicle identification numbers are optional, and information can be added later.

Consider which identifiers you can provide accurately and are comfortable submitting. More data can improve matching; it does not turn a status report into proof of deletion across the entire internet. If a field is unfamiliar, read its official explanation before filling it in.

Keep the request and its access code

The FAQ says the DROP ID lets you review and edit the request. Keep it private and use the official recovery route if it is lost. You do not need to start a fresh request every time a broker acquires new information: the request continues, and a future match can change an earlier record-not-found result.

The walkthrough describes an initial reporting period of up to 90 days and subsequent checks at least every 45 days. It also identifies limits, including exempt information, publicly available data and information you gave directly to a business. A DROP request does not replace every account-specific deletion process.

Treat reported results as reported results

CalPrivacy's October announcement describes substantial numbers of profiles reported deleted by brokers. Those are the agency's reported platform results. This article does not independently inspect broker systems or verify an individual deletion.

Use the status page to decide what to check next, keep a dated record, and follow the official help links when the result needs clarification. A precise record of what the service reports is more useful than a blanket promise that your information has disappeared.

Sources