California DROP Act 2026: Remove Personal Information from Data Brokers.
What California's new deletion platform does, what it does not do, and how data-broker removal fits into a broader personal reputation strategy.
DROP gives Californians one place to request deletion from participating data brokers.
It is a powerful privacy tool, but it is not the same thing as removing a Google result. Source deletion, Google indexing and reputation management are related but separate processes.
How California DROP works and where it fits.
What is California DROP?
California's Delete Request and Opt-out Platform, known as DROP, gives California residents a single place to submit a deletion request to participating data brokers. The platform launched in January 2026, and data brokers began processing requests on August 1, 2026. This is a major change for people trying to reduce the amount of personal information held and sold by data-broker businesses.
Why DROP matters for online reputation
Data broker profiles can expose names, addresses, phone numbers, relatives, age information and other personal details. Even when the information is not directly damaging, a large public footprint can make it easier for unwanted information to surface in searches and can complicate personal reputation work. Removing information at the source can therefore be one part of a broader reputation and privacy strategy.
Who can use DROP?
DROP is designed for California residents. The state privacy agency says users first verify eligibility, create a profile and submit a deletion request. The system is intended to send the request to registered data brokers rather than requiring a consumer to repeat the same opt-out process across hundreds of sites.
What happens after you submit a request?
After a request is submitted, DROP provides an eight-digit DROP ID that can be used to check status. Data brokers began processing requests on August 1, 2026 and must access the deletion mechanism at least once every 45 days. The state says consumers may wait up to 90 days to see status updates from the initial processing cycle, so a request should not be treated as an instant removal from every website.
What information can you provide?
California's official guidance says a DROP profile can include information such as names, date of birth, ZIP code, email addresses, phone numbers, mobile advertising IDs, connected TV IDs and vehicle identification numbers. Providing additional identifiers can improve the chance that a data broker matches the correct record. Consumers should only provide information through the official DROP system and should protect their DROP ID.
Does DROP remove everything from Google?
No. DROP operates on registered data brokers and their handling of consumer information. It is not a Google search-result removal tool. If a data broker page has already been indexed by Google, source deletion and search-engine processing are separate steps. Google may continue showing a result until it crawls and updates its index, and a separate qualifying Google removal or de-indexing process may sometimes be relevant.
What if information remains after DROP?
A data broker may not have a matching record, may have a statutory exception, or may need more identifiers to match the request. Some information can also come from websites that are not covered by DROP. If personal information remains visible, the next step is to identify the source, determine whether a direct deletion or privacy request is available, and then assess whether a qualifying search-engine removal or broader reputation strategy is appropriate.
DROP and the California enforcement environment in 2026
The timing of this article matters. California data brokers were required to begin processing DROP requests on August 1, 2026, and the state has already announced enforcement action involving a data broker under its privacy laws. That makes data-broker compliance and consumer deletion requests a live 2026 issue rather than a future policy change.
How data removal fits into personal reputation management
Personal reputation management should begin with an audit of what appears when a person's name is searched. Data broker exposure is one category. News articles, public records, complaint pages, professional profiles and other sources are separate categories. The strongest approach is to address each source using the route that actually applies: source deletion, correction, qualifying de-indexing or search suppression. Removing broker data can reduce unnecessary exposure, while stronger authoritative assets can improve the broader search landscape.
A practical 2026 checklist
For a California resident, start with the official DROP eligibility check and submit the deletion request. Save the DROP ID and review status over time. Then search your name in Google and record the remaining personal-information pages. Separate data-broker results from news, public records and other content. For each remaining URL, identify who controls it and whether a legitimate deletion, correction, privacy or Google removal route applies. If a harmful result cannot be removed, assess search suppression rather than treating every problem as a deletion request.
What to do when personal information is still visible.
Still seeing personal information in Google?
We can identify the source of each result and explain whether source removal, privacy requests, qualifying de-indexing or suppression is the realistic route.