How the California DELETE Act works.
One statutory request, ~500 registered brokers
The California DELETE Act (SB 362, Civ. Code §1798.99.80 et seq.) creates a single verified deletion request that every broker registered with the California Privacy Protection Agency (CPPA) must honour within 45 days. It follows the resident, not the broker's headquarters.
The DROP portal has no agent-submission API
The CPPA's DROP mechanism accepts no agent submissions — the final click is yours. KnytX prepares, verifies, and formats the request; you submit it. That authorisation boundary is why the guided filing hands the submission step back to you.
In short: the free California DELETE Act filing lives on the DELETE Act product page — that page prepares the request, walks you through submitting it, and tracks broker responses. This page is the methodology reference: what the statute does, what it covers, and where KnytX’s role begins and ends.
What the statute does
California Senate Bill 362 was signed in October 2023 and codified as Civil Code §1798.99.80 through §1798.99.89. It requires data brokers operating in California to register annually with the CPPA. Through the CPPA’s “accessible deletion mechanism” (the DROP portal), a California resident submits one verified request, and every registered broker must delete their records and stop selling their personal information. Instead of contacting ~500 brokers individually, you file once.
What KnytX prepares (and what stays yours)
The DROP mechanism has no consumer- or agent-submission API — there is no button KnytX can press for you. KnytX removes the busywork around the manual step: it verifies California residency, assembles your full identifier set (every email on your account, phone, prior addresses, legal name), prepares the request in the format DROP requires, walks you through submitting it, then tracks acknowledgements and the 45-day compliance window in your dashboard.
The submission click is yours. For CCPA/CPRA per-broker requests — a different mechanism KnytX does submit on your behalf — see the authorised-agent disclosure.
What it covers, and what it doesn’t
| Covered | Not covered |
|---|---|
| Brokers registered with the CPPA (~500 entities) | Brokers operating in California without registering |
| Personal information those registered brokers hold | First-party processors you deal with directly (bank, employer, insurer) |
| Continued sale or sharing going forward (brokers must stop) | Records already sold downstream before the request |
The DELETE Act reaches the ~500 registered brokers. A long tail of unregistered and international brokers is outside its scope — that gap is what paid KnytX Shield closes with per-broker CCPA §1798.105 removals and continuous re-removal.
Legal authority
- California Civ. Code §1798.99.80 et seq. — the DELETE Act itself.
- CCPA §1798.140(i) — authorised-agent definition.
- CCPA Reg §7063 — signed-permission requirements for an agent.
- CCPA §1798.105 — the underlying deletion right the Act amplifies.
For how the DROP mechanism fits KnytX’s broader cross-regime removal strategy, see the legal-framework matrix. This page is not legal advice; for a specific dispute, consult a privacy attorney in your jurisdiction.
See also
- DELETE Act Filing — the free guided filing (California residents) — where you actually file
- KnytX Shield — paid coverage including unregistered brokers
- Legal-framework matrix — the full cross-regime context
DELETE Act questions: legal@knytx.com, subject line “DELETE Act”.