CPPA issues Data Broker Registration and Accessible Deletion Mechanism (DROP) regulations text

CPPA published the text of regulations for data broker registration and the accessible deletion mechanism (DROP). The materials are posted as effective 01/01/2026 and operationalize data broker compliance obligations that have downstream vendor/service-provider implications (e.g., deletion request processing workflows and related governance). Compliance teams that operate as data brokers or manage data-broker vendors should ensure processes and contractual flow-downs support required deletion handling and related operational duties tied to the DROP mechanism.