PrivacySignal
News

Delete Request and Opt-out Platform (DROP) Audits

California Privacy Protection Agency (CPPA) (.gov) · · US / State · Privacy Law

The California Privacy Protection Agency has launched DROP Audits, a program examining platforms that handle consumer data deletion requests and opt-out signals. The audits are designed to assess whether companies are actually honoring the privacy choices Californians submit through these systems.

Why this matters: When you ask a company to delete your data or opt out of selling it, you are trusting a process you cannot see. DROP Audits are California's attempt to check whether that process works or whether companies are just collecting opt-outs and ignoring them. That matters because opt-out rights are only useful if someone verifies they are real. This is the CPPA doing the job regulators are supposed to do — not just writing rules, but checking whether the rules are being followed.

Who should care: General readers · Privacy officers · Policy

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Deep Signal · Part I of III

The Algorithm Said So

Federal rulemakers are deciding what to do when artificial intelligence produces the kind of conclusion that once required an expert. They disagree about how to regulate it. They also disagree about whether the problem has arrived.

· 10 min read Read →

Related stories

News
Inside Privacy (Covington) · · International

CISA Submits Final CIRCIA Rule for OMB Review

On October 1, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (“CISA”) submitted a draft of the Final Rule implementing the Cyber Incident Reporting for Critical Infrastructure Act of 2022 (“CIRCIA”) to the Office of Information and Regulatory Affairs (“OIRA”) for interagency review, marking one of the final steps before the Final Rule will be... Continue Reading…

Who should care: Lawyers · Compliance

#regulation Read original →