Californians' data deletion requests, DROP, become enforceable Aug. 1

2 hours ago

California is launching the Delete Request Opt-out Platform (DROP) on Aug. 1, allowing residents to request data brokers stop selling their personal info with a single submission, instead of contacting hundreds of companies individually.
About 350,000 Californians have already signed up via the DROP website since Jan. 1, as personal data collected online—like shopping or browsing habits—is often packaged and sold, raising privacy concerns.
Data brokers must comply within 45 days or face fines of $200 per day for each affected resident, and California has already fined 12 brokers for failing to register in the system.

DROP (Delete Request and Opt-out Platform) is a California tool allowing residents to send a single request to all registered data brokers to delete their information and opt out of its sale.
After August 1, data brokers have 45 days to comply with DROP requests, but filing now positions users early for the compliance deadline.
The Delete Act, supported by EFF, created DROP to simplify the tedious process of making individual privacy requests to numerous data brokers.

Data brokers cause many societal harms (deepfake porn, phishing, discrimination, ICE roundups, election interference, identity theft) yet Congress has not passed a federal consumer privacy law since 1988.
California's DROP (Delete Request and Opt-out Platform) allows consumers to request deletion of their data from brokers but requires a cumbersome, redundant process with multiple identity verifications (Login.gov, photo ID, text/email codes, VIN, mobile ad identifier).
The system is based on the flawed assumption that people want to be spied on; evidence shows 96% of iPhone users opted out of Facebook tracking when given a simple one-click option.

Gov. Newsom signed SB-169, authorizing the DMV to upload California driver's license and state ID data to the national SPEXS database held by AAMVA.
The law's 'guardrails' are criticized as ineffective against potential bulk data requests from federal or other states' law enforcement, which could occur without notifying affected Californians.
Claims that the data sharing is federally mandated are disputed; it applies only if states comply with the REAL-ID Act, which is voluntary, and 170 organizations oppose it as a harmful choice for communities.

noyb has filed a complaint against dict.cc for violating the GDPR by using a consent banner that nudges users to consent to tracking by 1,741 partner companies with a single click.
The GDPR requires that consent is freely given, informed, specific, and unambiguous, but dict.cc's practice makes it impossible for users to understand who accesses their data or how it is used.
Reading all privacy policies of the 1,741 partners would take over 170 hours, rendering informed consent practically impossible.

When you open a credit card or change your address, that data is shared with credit bureaus and then sold to data brokers like Thomson Reuters without your explicit consent.
ICE buys this credit header data through Thomson Reuters' CLEAR tool for immigration enforcement and voter fraud investigations, often without a warrant.
The data supply chain involves Equifax and Experian providing credit header records to Thomson Reuters, which then sells access to government agencies like ICE.

DROP (Delete Request and Opt-out Platform) is a California tool allowing residents to send a single request to all registered data brokers to delete their information and opt out of its sale.
After August 1, data brokers have 45 days to comply with DROP requests, but filing now positions users early for the compliance deadline.
The Delete Act, supported by EFF, created DROP to simplify the tedious process of making individual privacy requests to numerous data brokers.

Data brokers cause many societal harms (deepfake porn, phishing, discrimination, ICE roundups, election interference, identity theft) yet Congress has not passed a federal consumer privacy law since 1988.
California's DROP (Delete Request and Opt-out Platform) allows consumers to request deletion of their data from brokers but requires a cumbersome, redundant process with multiple identity verifications (Login.gov, photo ID, text/email codes, VIN, mobile ad identifier).
The system is based on the flawed assumption that people want to be spied on; evidence shows 96% of iPhone users opted out of Facebook tracking when given a simple one-click option.

Gov. Newsom signed SB-169, authorizing the DMV to upload California driver's license and state ID data to the national SPEXS database held by AAMVA.
The law's 'guardrails' are criticized as ineffective against potential bulk data requests from federal or other states' law enforcement, which could occur without notifying affected Californians.
Claims that the data sharing is federally mandated are disputed; it applies only if states comply with the REAL-ID Act, which is voluntary, and 170 organizations oppose it as a harmful choice for communities.

noyb has filed a complaint against dict.cc for violating the GDPR by using a consent banner that nudges users to consent to tracking by 1,741 partner companies with a single click.
The GDPR requires that consent is freely given, informed, specific, and unambiguous, but dict.cc's practice makes it impossible for users to understand who accesses their data or how it is used.
Reading all privacy policies of the 1,741 partners would take over 170 hours, rendering informed consent practically impossible.

When you open a credit card or change your address, that data is shared with credit bureaus and then sold to data brokers like Thomson Reuters without your explicit consent.
ICE buys this credit header data through Thomson Reuters' CLEAR tool for immigration enforcement and voter fraud investigations, often without a warrant.
The data supply chain involves Equifax and Experian providing credit header records to Thomson Reuters, which then sells access to government agencies like ICE.

Hasty Briefsbeta