California just switched on the first button that deletes you from the data economy. Read what it can't reach.

On August 1, a mechanism that the data-broker industry spent two years arguing against quietly began to work. A Californian can now go to a single state-run website, verify their identity once, and instruct every data broker registered in the state to delete everything it holds on them. Not one broker at a time, chased through a hundred separate opt-out forms most people never find. All of them, from one request. The brokers have 45 days to check the list and comply, and they have to keep checking it, at least once every 45 days, indefinitely. It is, on paper, the most direct power an ordinary person has ever been handed over the market that trades in them. The platform is called DROP, the Delete Request and Opt-out Platform, and it is run by the California Privacy Protection Agency under a 2023 law called the Delete Act. The mechanism is real. What it can reach is the question.

Start with what the record actually establishes, because the promise and the plumbing are not the same thing. The Delete Act, formally Senate Bill 362, defines a data broker as a business that knowingly collects and sells the personal information of consumers with whom it has no direct relationship. That last clause is the whole definition. A store you shop at is not a data broker; it has a relationship with you. The company that buys your purchase history from that store, merges it with your location trail and your inferred health conditions, and sells the composite to whoever pays, is. Under the law, every such business operating in California has to register with the state each year, between January 1 and January 31, and pay an annual fee set at $6,000 for 2026. The registry that results is public. And DROP draws its list of who must honor a deletion request directly from that registry.

The registry is the load-bearing document

Here is the structural fact that everything else rests on, and it is worth stating plainly because the coverage of DROP has mostly skipped past it: the platform can only delete you from the brokers that registered. A deletion request routed through DROP reaches the companies on the state's list. It does not reach a company that meets the legal definition of a data broker but never filed. The system is comprehensive over the set of firms willing to be named, and silent over the set that isn't. The registry is not a census of the data economy. It is a roster of its law-abiding members.

The state is not blind to this, and the record shows it building the enforcement muscle the design requires. In 2024 the CPPA created a Data Broker Strike Force with a specific job: find the businesses that meet the definition and never registered. Its early results are the tell. The agency has already reached settlements with brokers it caught unregistered — Growbots and UpLead each agreed to pay roughly $35,000 in penalties, and a company called Background Alert settled a non-registration case by agreeing to shut down its operations through 2028. The penalty structure runs on time: a broker that registers late owes $200 for every day it was late. One Florida-based broker that filed 230 days behind faced a fine near $46,000 on that arithmetic alone. Those are real actions with real numbers, and they establish the same thing from two directions. The fines prove the state is hunting for the unregistered. The need to hunt proves they exist.

The registry is not a census of the data economy. It is a roster of its law-abiding members.

This is the pattern anyone who reads these filings for a living learns to expect. A registration regime surfaces the compliant and defines, by their absence, the population it is trying to reach. The value of DROP is not that it has solved the data economy. It is that, for the first time, it has drawn a hard line between the brokers who will accept a legal duty to erase a person and the brokers who are betting the state never notices them. That line did not exist before. Drawing it is worth something. Mistaking it for the whole map is the error.

Why deletion is harder than it sounds

Even inside the registered set, the word 'delete' is carrying more weight than the plumbing may support, and the honest thing is to say where the record runs thin. A broker's business is not a single database with a row for each person. It is a pipeline: raw feeds bought from apps and other brokers, an aggregation layer that stitches them into profiles, inferences drawn on top, and copies sold downstream to buyers the broker is often contractually forbidden to name. A deletion order lands on the broker that holds your profile. What it does to the copies already sold — the derived scores, the models trained on your record, the segments a buyer built and now treats as its own — is far less clear, because those downstream products frequently no longer count, legally, as your personal information in the buyer's hands. The Delete Act reaches the broker. Whether it reaches everything the broker already turned you into is the part the statute is quieter about, and quiet is where these markets live.

None of that makes the mechanism worthless. A person who deletes themselves from every registered broker has genuinely cut a large number of active feeds, and cut them permanently, because the brokers must keep honoring the request on that rolling 45-day cycle rather than quietly re-adding the person next quarter. That is real and it is new. But 'you have been erased from the data economy' and 'you have been erased from the brokers who registered, to the extent the copies they already sold are covered' are two different sentences, and only the second one is supported by the documents.

The same records, priced back to you

To see why any of this matters beyond principle, follow the data to a place it is now being used, because the state itself just did. On January 27, California Attorney General Rob Bonta opened an investigative sweep into what his office calls surveillance pricing — the practice of using a person's own data to set the individual price they, specifically, are shown. His office sent letters to businesses in retail, grocery and hotels demanding to know how they use personal information, browsing and shopping history, location and demographics to set targeted prices, and whether the practice complies with California's privacy, competition and civil-rights laws. Bonta's framing was exact: consumers have a right to know whether companies are using their data to set the prices Californians pay, 'whether that be for groceries, travel, or household goods.'

The reason that sweep and the deletion platform belong in the same article is that they are two ends of one pipe. Surveillance pricing is what the assembled profile is for. A 2025 Consumer Reports investigation cited in the enforcement discussion found that prices on Instacart varied by as much as 23 percent per item between customers — differences running from seven cents to $2.56 on the same product, bought at the same moment, from the same store. The mechanism that makes that possible is a rich enough picture of the shopper to guess what they will tolerate. That picture is built, in large part, from exactly the broker feeds DROP now lets a person switch off. Delete yourself from the brokers, and you are not just removing your name from a marketing list. You are, in principle, degrading the raw material that lets a company decide your price is $2.56 higher than your neighbor's.

• The mechanism: as of August 1, 2026, every data broker on California's registry must check DROP at least once every 45 days and delete anyone who filed a request — a standing, rolling obligation, not a one-time purge.
• The gap: DROP reaches only registered brokers. A firm that meets the legal definition of a data broker but never filed is invisible to the platform — which is why the state runs a Strike Force to find them, and has already fined several.
• The stakes: the same broker feeds feed surveillance pricing — the AG's January sweep and a Consumer Reports finding of up to 23 percent per-item price variance show what the assembled profile is ultimately used to do.

What the record supports, and what it doesn't

So here is the careful version, the one that survives a lawyer reading it line by line. California has built something that did not exist anywhere in the United States before: a single, standing, enforceable channel through which a person can compel deletion from an entire registered industry, and keep compelling it. The obligation is real, the penalties for ducking registration are real, the enforcement body exists and has already collected. For the brokers who play by the rules, the asymmetry that has defined this market — they know everything about you, you are not supposed to know anything about them — has narrowed for the first time in a way an individual can actually operate.

And here is where the record runs out. The platform's reach is bounded by a self-reported list, and the whole logic of a data broker that never registered is to stay off lists. The deletion it delivers is cleanest at the broker and murkiest downstream, among the copies and inferences already sold. It is a California mechanism, and the data trade does not stop at a state line. The Delete Act does not end surveillance pricing; it removes some of the fuel, in one state, from the firms honest enough to be named. That is a real subtraction from a market that has never had to give anything back. It is not the erasure the word 'delete' invites you to imagine. The button works. What it reaches is exactly the set of companies willing to be reached — and the ones that matter most are, by design, the ones that aren't on the list.