California's DROP-Era Enforcement Begins: Targets Data Broker Registration and Opt-Out Practices (via Passle)
California has begun enforcement under its Delete Request and Opt-Out Platform (DROP) rules, focusing on whether data brokers have registered with the state and are honoring consumer opt-out requests. The enforcement phase marks a shift from rulemaking to active accountability for companies that collect and sell personal data.
Why this matters: Data brokers trade in your personal information without ever asking you. California's DROP framework was designed to give people a real way to stop that. Enforcement is what turns a law into something brokers actually fear. If regulators are targeting registration failures and ignored opt-outs, companies that assumed no one would check are now finding out they were wrong. The test is not whether the rules exist. It is whether people who invoke their rights actually see those rights honored.
Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.