Learn how California residents can use DROP to request data-broker deletion, understand status timelines and handle information that remains visible in search.
California’s DROP platform makes it easier to request deletion from covered data brokers, but it does not automatically remove every webpage or Google result. This guide explains what the platform does and how to follow up safely.
California’s Delete Request and Opt-Out Platform, usually called DROP, gives eligible California residents a single place to submit a request to participating data brokers to delete personal information. Instead of finding each broker and filing a separate request, a resident can provide identifying details through the state platform and ask covered brokers to act. The California Privacy Protection Agency explains the programme at its official [DROP information page](https://privacy.ca.gov/drop/). DROP is a privacy tool, not a search-engine removal button: it addresses data held by covered brokers and does not automatically erase every public record, publisher article, social post or search result. Understanding that boundary helps set realistic expectations and decide what to do next if a name, phone number or address still appears in search.
The state made DROP available for consumer requests in January 2026. Beginning August 1, 2026, data brokers became required to begin accessing and processing requests through the platform on a recurring schedule. The agency says consumers may need to allow up to 90 days to see status updates while brokers complete their processing cycles. This means a request submitted recently may not immediately produce a visible change on a people-search site or Google. Use the official platform for current instructions and status information rather than relying on social-media summaries or a service provider’s outdated timeline. The rules and implementation details can evolve, so check the state source before making decisions based on a deadline or a claim about a particular broker.
DROP is intended for California residents. The platform uses a state identity-verification process to establish eligibility, and its guidance says users do not need to create a separate California Identity Gateway account. You can choose which supported identifiers to provide, such as names, email addresses, phone numbers and ZIP codes. More accurate matching information can help a broker locate a record, but only provide details through the official service and review its privacy explanation first. Do not send sensitive identifiers to an unfamiliar website that claims it can file a DROP request for you. If you are helping a family member, check the current official rules for when a request may be submitted on another resident’s behalf.
Start at the official [DROP platform](https://privacy.ca.gov/drop/) and read the eligibility and privacy information. Complete the verification steps, enter the identifiers you want brokers to use for matching, review the information carefully and submit the request. Save the confirmation and your DROP ID in a secure place; the agency uses that ID to help you check status. Avoid posting the ID publicly or sharing it with anyone who does not need it. Use the platform’s own account and status features for follow-up. If you discover that an old email address, previous phone number or name variation is missing, consult the official instructions on updating your information instead of repeatedly submitting duplicate requests without understanding how the platform handles them.
DROP is designed for personal information associated with a consumer that a covered data broker holds, subject to applicable law and exemptions. Data brokers may have records built from public and commercial sources, including contact details, household associations, identifiers or inferred attributes. The exact information varies by company. A successful request does not mean every item associated with your name will disappear from the internet. Information may be held by organisations outside the programme, and certain data may be exempt from deletion under the law. The state’s [How DROP Works guide](https://privacy.ca.gov/drop/how-drop-works/) explains the process and the kinds of identifiers a consumer can submit. Read the official guidance for current details rather than assuming every website is covered.
A status update is not always the same as a completed deletion. The state describes statuses that can include deleted, exempted, opted-out, record not found and pending. A record-not-found response may mean a broker could not match the identifiers supplied, rather than proving that no data exists anywhere. An opted-out outcome may limit sale or sharing without meaning every stored record was erased. The agency says status reporting may take up to 90 days, and broker processing continues on a recurring cycle. Keep your confirmation details, note when you submitted the request and check the official platform for the latest interpretation of each status. If a status seems inconsistent, use the agency’s support guidance before assuming that a broker has violated the law.
Google indexes webpages; it does not own every page that contains a person’s information. A data broker may delete a record from its own database while a cached copy, a third-party listing, a copied dataset or another publisher’s page remains accessible. Search results can also persist until Google recrawls and updates its index. If an address or phone number is still visible, identify the exact URL and the organisation publishing it. Ask the source to update or remove the information where a legitimate route exists, then review Google’s current policies for eligible personal-information removal requests. Eligibility depends on the type of information and circumstances. A DROP request alone should not be described as a guarantee that Google will remove a result.
Create a simple record with the date of submission, the types of identifiers supplied, the confirmation ID stored securely and the status-check date. Make a separate list of pages where your information is publicly visible, including the full URL, the data shown and the website operator. Avoid putting sensitive personal information in a shared spreadsheet or ordinary email. After the platform has had time to process requests, revisit the highest-risk listings and confirm whether the source page changed. If it did, check whether the search result reflects the current page. If it did not, determine whether the site is covered by DROP, whether a direct request is appropriate or whether another privacy process may apply. This evidence-based approach prevents repeated, unfocused requests.
Some websites may not participate in DROP or may be outside its scope. In those cases, review the website’s privacy policy and look for a documented opt-out, deletion or suppression process. Use only the information necessary to verify your request, and keep a copy of the confirmation. Be cautious of services that ask for excessive identity documents, demand payment for a basic request without clearly explaining the service, or claim to remove every mention of your name instantly. If a site refuses or does not respond, review the applicable privacy rights and official complaint routes for your circumstances. Do not assume that a people-search website is legally a data broker simply because it displays personal information; the legal definition and the facts matter.
Privacy cleanup and reputation management can overlap, but they solve different problems. DROP is a state mechanism for requesting deletion from covered data brokers. Content removal focuses on whether a specific publisher or platform can correct or remove a page under its policies or applicable law. Search-result suppression focuses on improving the visibility of accurate, useful pages when a negative result remains online. These approaches should not be blended into a single promise. For example, a person may use DROP for broker listings, submit a separate request about exposed personal information in a search result if eligible, and strengthen accurate professional profiles to improve branded search results. Each step has its own process, limitations and measures of success.
Begin with an audit of the exact queries and URLs that concern you. Classify each result as a data-broker listing, an official public record, a news article, a social post, a directory profile or another source type. Record what is inaccurate, sensitive, outdated or simply unflattering without treating those categories as interchangeable. Where removal or correction is appropriate, follow the source’s process and retain evidence. Where a lawful page is unlikely to be removed, build accurate assets that help searchers understand who you are, such as a complete professional biography, an authoritative company profile and useful original material. Avoid fake profiles, repetitive low-value pages or purchased links. For broader support, review [personal reputation management services](/services/personal-reputation-management) and [negative search result removal](/services/negative-search-result-removal) to understand the distinct service scopes.
Do not assume that a single request will erase all information about you, that every data broker is covered, or that a search result must disappear as soon as a request is submitted. Avoid sharing your DROP ID or identity documents with an unverified third party. Do not pay for a supposed guaranteed deletion from Google without understanding exactly what the provider will do and which party controls the outcome. A responsible provider should explain whether it is helping with a source request, privacy documentation, search-result removal eligibility or suppression work. It should also be clear about what happens if a publisher refuses, a record is exempt or a search engine does not approve a request. These distinctions are essential for protecting both privacy and your budget.
First, submit your request through the official DROP platform and securely save the confirmation. Second, create a private inventory of the pages where personal details appear. Third, wait for the platform’s stated processing and status timeline while checking official updates. Fourth, for pages that remain, determine whether the operator is a covered data broker and whether a direct privacy request is available. Fifth, consider search-engine removal processes only when the information and circumstances meet the platform’s current criteria. Finally, recheck the actual pages and search results instead of relying only on an email confirmation. This plan is practical, but it is not legal advice and cannot guarantee a specific outcome. For complex legal questions, consult a qualified privacy professional or attorney.
Does DROP remove information from Google? No. It sends deletion requests to covered data brokers; Google results may require separate action. Is DROP instant? No. The state advises that status updates can take up to 90 days, and processing occurs in recurring cycles. Does it cover every website? No. Coverage depends on the programme and the organisation’s role. Should I submit my request repeatedly? Check the platform’s official guidance and update your information when appropriate rather than creating duplicate requests without a reason. Can a broker keep some information? Certain statutory exceptions may apply. For the most current answers, rely on the [California Privacy Protection Agency’s consumer guidance](https://privacy.ca.gov/drop/) and its [DROP process explainer](https://privacy.ca.gov/drop/how-drop-works/).
Start with the official DROP platform, then assess each remaining URL separately. A broker deletion request, a search-engine removal request and reputation suppression are different processes.
Prioritize sensitive or unnecessary exposure such as home addresses, phone numbers and other personal details that create meaningful privacy risk.
Recheck the affected URLs and important name, address or phone searches periodically to identify reappearance or new sources.
Not always. Search-index updates can take time, and a separate search-result process may apply depending on the circumstances.
Yes. Broker networks, scraped pages and republished records can create multiple URLs, so removal should be checked across the important search results.
Start with the core ORM framework and build a credible search presence around important queries.
Read guide →Related GuideMap affected URLs and distinguish source remedies from search visibility work.
Read guide →Related GuideLearn how relevant authoritative assets can compete with persistent negative results.
Read guide →