California's DROP: A Game-Changer for Digital Privacy
California residents now have a powerful new tool, the **Delete Request and Opt-out Platform (DROP)**, to reclaim their digital privacy. This innovative system simplifies the complex process of demanding data deletion and opting out of data sales from hundreds of registered data brokers with a single submission, significantly enhancing personal cybersecurity and control over private information.
Are you a California resident concerned about your digital footprint? The **Delete Request and Opt-out Platform (DROP)** offers a streamlined solution to protect your privacy by allowing you to submit a single request to all registered data brokers in California, demanding they delete your information and cease its sale and sharing.
### What Does a DROP Request Accomplish?
Filing a request through **DROP** sends a deletion and opt-out request to **614 data brokers** currently registered in California. These companies specialize in collecting, repackaging, and selling personal information. As of August 1st, data brokers will have 45 days to comply with received requests. While **DROP** officially launched on January 1st, companies have until August 1st to begin full compliance, making early submissions advantageous.
### The Genesis of DROP: The Delete Act
For those familiar with the **EFF**'s advocacy, **DROP**'s origins lie in the **Delete Act**, a law championed to empower Californians. Despite existing rights to request data deletion and opt-out of sales under the **California Privacy Rights Act (CPRA)**, the process was historically cumbersome and time-consuming. The **Delete Act** and **DROP** address this by centralizing requests, linking them directly to California's data broker registry, and simplifying compliance.
This initiative aims to make privacy laws more user-friendly, providing individuals with greater control over their data and mitigating risks associated with uncontrolled personal information collection and sale.
### Tangible Benefits for Users
Filing a **DROP** request offers several key advantages:
1. **Reduced Unwanted Communications:** Data brokers are often the source for spammers and unsolicited contacts. Removing your information can lead to a decrease in these messages.
2. **Enhanced Cybersecurity:** Minimizing the number of entities holding your personal data inherently reduces your attack surface and the potential for your information to be compromised in data breaches.
3. **Greater Data Control:** **DROP** empowers you to assert control over how your personal information is collected and utilized. Without such intervention, data brokers can sell your private details to predatory companies, scammers, stalkers, insurance providers, and even law enforcement agencies.
### Understanding What Data Is (and Isn't) Deleted
The **California Privacy Protection Agency (CPPA)**, which oversees **DROP**, provides comprehensive resources on what data is covered. Generally, requests target identifying information such as Social Security numbers, precise geolocation data, browsing history, email addresses, and phone numbers. It also includes inferences made about you, such as political views or health conditions, based on your digital activities.
However, publicly available information, such as vehicle or real estate ownership, is not subject to deletion. Users also have the option to exempt specific data brokers from receiving their requests.
### How to File Your Request
To initiate your request, visit the **CPPA's DROP website**. Before starting, it's advisable to gather relevant information like your advertising ID or VIN number if you wish to include them in your deletion request.
The agency will collect some personal information (name, address, phone number, email) to verify your identity and fulfill the request. The **CPPA** is bound by its terms of service not to sell or share this verification data for other purposes. You can also file on behalf of another California resident, such as an elderly relative, by attesting to their residency.
Upon filing, you'll receive a **DROP ID** to track your request's status. Keep this ID safe for future reference.
### Is This a One-Time Solution?
Unfortunately, no. While the opt-out of sale request should be indefinite, California's privacy laws still permit companies to collect new information without explicit permission in most scenarios. This means data brokers may continue to build profiles, though with less data and restrictions on its use post-opt-out. New data brokers may also register, and **DROP** does not apply to companies not registered as data brokers, such as **Google**.
While **DROP** is a significant advancement for privacy rights, it underscores the ongoing need for stronger privacy legislation. Integrating **DROP** requests into a broader strategy for managing your digital footprint is recommended. Consider making it a regular practice, perhaps as part of an annual 'Opt-Out October' initiative, as suggested by the **EFF**.
### For Non-California Residents
Currently, **DROP** is exclusively for California residents. However, similar legislation, inspired by California's **Delete Act**, is being considered in other states. Regulators nationwide are closely observing **DROP**'s efficacy. Regardless of location, individuals can still leverage the **EFF**'s Opt-Out October guide to enhance their online privacy and limit data broker activities.