Drop45 › Guides
Plain-language guides to California's DROP program for registered data brokers — registration, the 45-day cycle, response file mechanics and the Delete Act timeline. None of this is legal advice; consult a privacy attorney about your specific obligations.
What each response-file status code means, how to build the Id,Status CSV, and how to amend a code you already submitted.
The Delete Request and Opt-Out Platform explained — what CalPrivacy publishes, what the 45-day cycle requires, and what you send back.
Who must register, the annual fee and deadline, and how registration decides whether DROP applies to you.
What the law requires of California data brokers from Aug 1, 2026, and how the $200/day penalty is calculated.
The broker-side obligations checklist: the 45-day cycle, matching, status reporting and the ongoing suppression duty.
A dates-and-duties timeline of SB 362 and its regulations, from registration through the recurring processing deadlines.
Who must notify, what triggers it, the AG's 500-resident threshold, and how it ties to CCPA/CPRA and the Delete Act.
A CCPA/CPRA compliance overview and how it relates to a data broker's DROP obligations.