Article
Deletion obligations under DROP are here! Data brokers must now ...
privacyrights.org
Quoted on this wiki
Every place a page here uses this source, in the order the words come in it.
DROP is the state’s Delete Request and Opt-out Platform, the first free public tool of its kind, and the deletion mechanism required by the California Delete Act. It allows Californians to securely submit a delete or opt-out request to every registered data broker at once. CalPrivacy, the California Privacy Protection Agency, runs DROP and charges Californians nothing to use it. More than 300,000 Californians have signed up since January. “Beginning today, every registered data broker must access DROP at least once every 45 days, retrieve the deletion requests, and delete the personal information of each individual on that list, including any inferences the broker has drawn from that information.” Because the obligation is ongoing, a broker that re-acquires your information after deleting it must delete it again on the following cycle. The Delete Act separately prohibits registered brokers from selling or sharing new personal information about any consumer who has submitted a deletion request.
DROP is the state’s Delete Request and Opt-out Platform, the first free public tool of its kind, and the deletion mechanism required by the California Delete Act. It allows Californians to securely submit a delete or opt-out request to every registered data broker at once. CalPrivacy, the California Privacy Protection Agency, runs DROP and charges Californians nothing to use it. More than 300,000 Californians have signed up since January. “A broker has 45 days from receiving your request to complete the deletion, and must direct its service providers and contractors to do the same.” Because the obligation is ongoing, a broker that re-acquires your information after deleting it must delete it again on the following cycle. The Delete Act separately prohibits registered brokers from selling or sharing new personal information about any consumer who has submitted a deletion request.
Beginning today, every registered data broker must access DROP at least once every 45 days, retrieve the deletion requests, and delete the personal information of each individual on that list, including any inferences the broker has drawn from that information. A broker has 45 days from receiving your request to complete the deletion, and must direct its service providers and contractors to do the same. “Because the obligation is ongoing, a broker that re-acquires your information after deleting it must delete it again on the following cycle.” Its important to note that brokers may decline a request where a legal exemption applies to the information. But, when a broker does decline, it must report that denial to CalPrivacy, disclose the number of requests it denied, and identify the specific provision it relied on.
DROP is the state’s Delete Request and Opt-out Platform, the first free public tool of its kind, and the deletion mechanism required by the California Delete Act. It allows Californians to securely submit a delete or opt-out request to every registered data broker at once. CalPrivacy, the California Privacy Protection Agency, runs DROP and charges Californians nothing to use it. More than 300,000 Californians have signed up since January. “A broker has 45 days from receiving your request to complete the deletion, and must direct its service providers and contractors to do the same.” Because the obligation is ongoing, a broker that re-acquires your information after deleting it must delete it again on the following cycle. The Delete Act separately prohibits registered brokers from selling or sharing new personal information about any consumer who has submitted a deletion request.