California Delete Act · DROP compliance

Your data files, kept DROP‑compliant every cycle.

A fully managed service that connects securely to your files on AWS. Each cycle it pulls the state’s DROP deletion list, removes matching consumers before your data goes anywhere, and keeps the evidence regulators and auditors ask for.

consumer_file.csvDROP cycle scrubbed
Matched record deleted. List version, time and file logged for your audit trail.
Illustration only.
Every 45 daysYou must retrieve and process DROP deletion requests at least this often. Required since August 1, 2026.
$200 / dayPer consumer deletion request still in your files past the deadline. It compounds daily, with no cure period. Source
2028Independent third-party audits begin. You will need proof of suppression, not just a process.

“We’ll just stop selling California records.” That isn’t enough.

DROP matches people, not addresses. If someone moves to California and registers with DROP, but your file still lists them at their old Nevada address, you’re required to delete the whole record.

Filtering by state won’t catch them. Matching on the identifiers DROP uses will.

How it works

Four steps, every cycle, without anyone touching a spreadsheet.

01

Pull

Retrieves the current DROP deletion list from the state’s API on schedule, every cycle.

02

Match

Converts your identifiers to the state’s standard hashed format and compares phone, email, name + DOB + ZIP, VIN, MAID and CTV ID.

03

Remove

Deletes whole matching records as your files come in. Everything else passes through untouched.

04

Prove

Logs which list version was applied, when, and to which files, ready for your status reporting and audits.

Why DropItDone

Built for the way DROP actually works.

Suppression that keeps up

The DROP list only grows. Files you keep are re-scrubbed as new requests arrive, not just your next delivery.

Audit-ready by default

Every change to your data is traceable, so proving suppression across all in-scope data is a report, not a project.

Fits your pipelines

Clean files land where your processes expect them, and re-scrubbed history is never mistaken for new data.

Any file, any size

Each file is handled in its own layout, from kilobytes to tens of gigabytes. Cost follows your data volume, not how often it checks.

Correct every run

Only matched records are removed. A failed job never leaves partial output, and a re-run is always safe.

Secure and fully managed

Your data is encrypted throughout, and we never keep copies of your files. We read them fresh each cycle. Access is tightly controlled, and there’s nothing for you to install or maintain.

Who it’s for

Built for data brokers and list providers.

If you sell or license consumer data you didn’t collect directly, DROP applies to you. DropItDone takes the cycle off your plate so your team can get back to the data.

Talk to us

See DropItDone run against a sample of your files and get a walkthrough of the audit trail.

[email protected] www.DropItDone.com
Book a walkthrough