CCPA Data Broker Opt-Out Guide 2026: Use California Law to Remove Your Data
California residents can use applicable CCPA rights to request deletion or opt out of certain data uses, subject to coverage, verification, and legal exceptions. This guide explains direct requests and the CPPA's DROP platform, with links to the official sources.
Your CCPA rights at a glance
Right to Know
Ask any data broker what personal information they hold about you and why they have it.
Right to Delete
Request that a data broker delete your personal information. They have 45 days to comply.
Right to Opt Out of Sale
Tell data brokers not to sell or share your personal information with third parties.
Right to Non-Discrimination
Brokers cannot deny you services or charge you more for exercising your CCPA rights.
The California DROP Platform (January 2026)
The Delete Act directs the California Privacy Protection Agency to operate an accessible deletion mechanism. The CPPA calls its consumer-facing application the Delete Request and Opt-Out Platform (DROP). The agency's official guidance and statutory text control if this summary differs from later implementation materials. CPPA guidance · statutory text
How DROP works
How to send a direct CCPA deletion request
Even without DROP, a California resident may send a verifiable deletion request directly to a covered business. The template below is a practical starting point, not legal advice; check the recipient's current privacy-request instructions and keep a copy of what you send.
OfflistMe prepares a broker-specific version of this request, including the listed privacy contact. Read how to write a clear privacy-rights request →
CCPA vs other state privacy laws
Most brokers honor CCPA requests regardless of your state because California has the strictest law and brokers cannot verify state residency at scale. But if you want to cite your own state's law, here is the landscape:
| State | Law | Deletion right | Effective |
|---|---|---|---|
| California | CCPA / CPRA | Yes | 2020 / 2023 |
| Virginia | VCDPA | Yes | 2023 |
| Colorado | CPA | Yes | 2023 |
| Connecticut | CTDPA | Yes | 2023 |
| Texas | TDPSA | Yes | 2024 |
| Florida | FDBPA | Limited | 2024 |
Full state-by-state guide: data removal rights by state (30 guides)
FAQ
Do I have to be a California resident to use CCPA opt-out rights?
The CCPA rights described here apply to California residents when the legal requirements are met. Other states may provide separate rights and response rules. Do not assume that citing the CCPA creates the same legal right for a non-California resident; identify the law that applies to you and check the broker's current privacy request process.
What is the California DROP platform?
The Delete Request and Opt-Out Platform (DROP) is a California Privacy Protection Agency system for a single verifiable deletion request to data brokers covered by the Delete Act. The CPPA says the system is available in 2026; beginning August 1, 2026, covered data brokers must access the mechanism at least once every 45 days and process requests subject to limited exceptions.
How long does a CCPA data deletion request take?
For a covered, verifiable California consumer request, the CCPA generally provides a 45-day response period, with a permitted extension in some circumstances when the consumer is notified. A response deadline is not a guarantee that every request will result in deletion; exemptions and verification requirements can apply. If the broker does not respond, document the request and consider following up or filing a complaint with the appropriate regulator.
What if a data broker ignores my CCPA deletion request?
Keep the request, verification correspondence, and any response. Send a written follow-up, then use the California Privacy Protection Agency complaint or enforcement channels when the issue falls within its jurisdiction. A complaint is an escalation option, not a guarantee of a particular outcome.
Related reading
Generate CCPA-compliant opt-out emails instantly
OfflistMe has a free tier and generates properly-worded CCPA deletion requests for 1000+ brokers. You send them from your own inbox, no account, no ID, with paid options starting at $9 (one-time).
Start with 3 brokers free →