Observed Signal · Feb 25, 2026 · Policy Update · Source: https://martechseries.com/feed/ · Impact: 4/5 · Sentiment: Negative
California's DROP Tool: A Wake-Up Call for B2C Marketers
California launched the Delete Request Opt-Out Platform (DROP) on January 1, 2026, enabling roughly 40 million residents to delete personal data from more than 500 registered data brokers with a single request. By August 1, 2026 data brokers must begin regularly checking DROP and processing deletions, creating operational privacy obligations (90-day processing, 45-day checks) and monetary penalties for noncompliance. The change is expected to accelerate deletion requests, reduce the availability and reliability of third-party data, and worsen attribution and measurement accuracy for B2C marketers. The article urges marketing leaders to audit third-party dependencies, accelerate first‑party data collection, implement incrementality testing, and invest in media-mix / cross-channel measurement to maintain performance insights as third-party data degrades.
A state-operated privacy platform (DROP) operationalizes deletion at scale with enforcement timelines and penalties, materially reducing third-party data reliability and degrading attribution across the AdTech ecosystem; marketers must rebuild measurement and data strategies before the August 2026 compliance deadline.
Track Meta Signals & Market Shifts in Real-Time
Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your free Explorer workspace to monitor these entities.
Key Takeaways & Evidence Grounding
- California launched the Delete Request Opt-Out Platform (DROP) on January 1, 2026.
- DROP enables about 40 million Californians to delete personal information from more than 500 registered data brokers with a single request.
- Data brokers must check DROP at least every 45 days, process matching records within 90 days, and maintain suppression lists; penalties can reach $200 per day per consumer for noncompliance.
- CalPrivacy fined Rickenbacher Data $45,000 and S&P Global $62,600 in January 2026 for registration violations.
- Studies cited: Consumer Reports found 35% success for commercial data-removal services within four months; Marketing Science research found ads served to opted-out users earn 52% less revenue on exchanges.
Connected Companies & Entities
7 Entities mappedOntology Mapping & Concepts
Related Market Signals & Shifts
Recent verified developments and strategic activity across this market segment.
California Delete Act and DROP Raise Broker Risk
AdExchanger reports that new U.S. privacy rules and enforcement are placing a renewed regulatory spotlight on companies that collect and sell consumer data. California’s Delete Act takes effect August 1 and introduces DROP, a centralized Delete Request and Opt‑Out Platform that allows residents to send one deletion request to all registered data brokers. Registered brokers must check DROP at least every 45 days and comply with deletion requests within 90 days; failures can trigger fines of $200 per request per day. Connecticut’s SB 4 (effective October 1 if signed) creates a separate data‑broker registry and defines “brokered personal data,” potentially sweeping in firms that buy, organize and resell third‑party information. Industry counsel warn companies cannot rely on informal self‑assessments (“I don’t think I’m a data broker”) and should reassess practices to avoid significant enforcement risk from CalPrivacy and state regulators.
CalPrivacy Warns Ad Tech on California Broker Rules
Tom Kemp, executive director of CalPrivacy (the California Privacy Protection Agency), told AdExchanger that ad tech companies should re‑examine whether they qualify as "data brokers" under California law. The article explains the DELETE Act — California’s new data broker law — which establishes a statewide broker registry and a CPPA-run portal called DROP (Delete Request and Opt-Out Platform) that lets residents submit bulk deletion and opt-out requests to registered brokers. Kemp says more than 300,000 Californians have signed up for DROP. The piece warns that companies that collect, aggregate and sell personal information about people with whom they have no direct relationship likely meet the statutory definition of a data broker, with implications for onboarders, ID vendors, audience-extension platforms and other intermediaries. It also flags enforcement trends around dark patterns, data minimization, and rules for automated decision‑making technology.
California Simplifies Privacy: No More Legal Jargon!
Privacy policy developments in California continue to evolve as regulators push for easier consumer rights. The article discusses the so-called privacy paradox and argues opt-out processes should be straightforward rather than buried in legal jargon. Tom Kemp was appointed executive director of the California Privacy Protection Agency (CalPrivacy) in March 2025, succeeding Ashkan Soltani who left in January. CalPrivacy previously issued enforcement advisories on dark patterns and highlighted penalties under the California Consumer Privacy Act. Notable fines cited include Healthline's $1.55 million penalty in July 2025 for deceptive consent banners and failing to honor opt-outs, and Tractor Supply's $1.35 million penalty in September 2025 for similar infractions. The Delete Act created the Delete Request and Opt-Out Platform (DROP), launching January 1, 2026, with data brokers required to check the platform every 45 days starting August 1, 2026 to process deletion requests at scale.
Track Real-Time Market Signals & Shifts
Set up custom watchlists to receive automated, evidence-grounded executive digests whenever material signals or shifts occur across your tracked landscape.