One Tech Tip: Californians have a new privacy tool for deleting their data

As the new year unfolds, Californians are presented with a significant advancement in personal privacy protection. Starting January 1, residents can utilize an innovative tool designed to facilitate the removal of their personal information from over 500 data brokers. This tool, known as the Delete Request and Opt-out Platform (DROP), marks a pioneering step in the United States, enabling individuals to reclaim control over their data. DROP simplifies the process of submitting requests to erase personal data from extensive databases. This initiative stems from new legislation aimed at enhancing consumer privacy rights and imposing stricter obligations on businesses handling personal information. Privacy advocates herald DROP as a crucial resource for individuals seeking to safeguard their privacy against the data broker industry, which often collects and sells fragments of personal information for marketing purposes. To get started, users can visit the official DROP website at privacy.ca.gov/drop. After reviewing the terms of use, individuals will have two verification options to confirm their California residency. Most users will likely opt for the first method, which requires basic personal information such as name, date of birth, address, and a phone number or email address for verification. Alternatively, those choosing the login.gov option will need to upload identification such as a passport or driver’s license. Once verified, users can submit their deletion request by providing essential details, including their name, birthdate, and ZIP code, along with a secondary verification code sent to their phone or email. The platform allows users to add multiple versions of their identifying information if they have changed names in the past. The DROP website emphasizes that providing more comprehensive information increases the likelihood of successful data deletion. Additionally, users can include a unique identifier, such as a Mobile Advertising ID or a vehicle identification number (VIN), although these are not mandatory. Data brokers will begin processing deletion requests starting August 1, with a commitment to handle these requests every 45 days. Non-compliance from data brokers could result in daily fines of $200. Data brokers often operate in the shadows, accumulating bits of personal information from various sources without the knowledge or consent of individuals. This information is then sold to a variety of buyers, which can range from legitimate businesses to potentially harmful entities. The scope of data collected includes online shopping habits, browsing history, employment information, and even sensitive details such as social security numbers and health records. While the DROP initiative is a step forward, experts caution that it has its limitations. The tool only applies to registered data brokers in California, and certain data categories, such as public records, are excluded from deletion. Nonetheless, as noted by Hayley Tsukayama from the Electronic Frontier Foundation, this tool represents a positive move towards enhancing consumer privacy, even if it does not address data collection as robustly as the European Union's GDPR. Overall, the introduction of DROP is expected to reduce unwanted spam communications and limit the circulation of sensitive personal information, contributing to a safer digital environment for California residents. As the initiative progresses, it may pave the way for further privacy advancements across the nation.