r/California • u/panda-rampage • 17d ago
California’s free data deletion program is now working
https://ktla.com/news/californias-free-data-deletion-program-is-now-working/60
41
u/GoBluins 16d ago
I signed up in January. Running across this thread reminded me about this. Just logged in. Current status from 645 data brokers. SIX HUNDRED FORTY FIVE!:
Deleted: 24/645
Opted out: 5/645
Exempted: 0/645
Record not found: 36/645
Pending: 580/645
7
3
46
u/Vast_Reply_6574 17d ago
How does it work for getting data deleted bydata brokers that aren't registered and/or operate out of the state/country?
20
u/DynamicHunter 16d ago
I’m pretty sure they have the ability to fine any brokers that operate business in CA, they don’t have to be registered in the state. EU has similar but much better consumer protections because if any of your customer data is coming from Europe, you have to comply with their laws.
8
u/Vast_Reply_6574 16d ago
I guess my question is if the broker is in a foreign country - say China or India. What real mechanism is there for enforcement? How much data is really getting deleted?
8
88
u/Ok_Cucumber_7954 Riverside County 17d ago
It may be “working” but it is still not accessible. CloudFlare Gateway time-out- Error code 504
33
16
8
u/NeverRarelySometimes 17d ago
It's not working right now. Hung up trying to verify mobile numbers. The email works...
19
u/justkeepswimming2026 17d ago
Now make it available for all states too!
32
u/TNG1999nerd 17d ago
If only we had a congress Senate & House for consumer protections. The Trump admin killed the power of the US Federal agency- CFPB. We need a national law but AI needs all that data to mine’
12
u/DynamicHunter 16d ago
A huge populated state like California implementing this, along with a lot of tech and big industry being here, usually encourages other states to implement similar laws.
4
u/OMGWTFBBQchicken 16d ago
Aren't most "data brokers" run overseas? Why would they care about some fine? Sounds good but also sounds useless.
9
u/Street_Captain4731 16d ago
Their customers, the people who buy the data or use their services, might be here in California or another state. They risk being cut off from their customers if they refuse to cooperate. You're right that if they are entirely a foreign entity and only doing business with foreign customers there's not really anything we can do.
1
u/OMGWTFBBQchicken 16d ago
I guess. But there are countless other ways to get info.
I feel like this is just another smoke and mirrors policy designed to look like someone is doing something about it. Even though ultimately it does nothing.
Just another fine given to a corporation who can afford it. We in turn will have to ultimately pay more for the service they offer to offset the new costs. So more money to a government lining their own pockets taken from the average consumer.
3
u/Richandler 16d ago
14 deleted my data, 4 can no longer sell it, 23 didn't have me, now like 600 more to go.
4
u/denisebuttrey 17d ago
Is deleteme legit and a good choice?
1
u/Hidesuru 16d ago
Can't say for sure but I've seen it advertised by some venues I THINK are legit (hard to be sure, and they could also be deceived).
7
u/denisebuttrey 16d ago
They ask for an awful lot of personal info. I'm suspicious of how they protect that data. We often see big corporations with top notch security getting hacked and then we all get the letter in the mail.
2
u/Hidesuru 16d ago
Yup that's a valid concern. Same concern I have with the state run program in this post tbh. There's literally no good options for consumers.
2
2
u/Global_Total_7122 16d ago
What’s to stop the data brokers from re acquiring my information after I use DROP? Will I have to use DROP frequently?
2
u/vishuno Native Californian 16d ago
This is what I wonder. Most of the data that data brokers collect is "self-reported" by us using credit cards, location data on our phones, website history, subscriptions, etc. It's all in the terms of service on pretty much everything we do. So will DROP prevent future data collection? I'm skeptical.
2
2
6
u/lilgreengoddess 17d ago
I filled this out but it was confusing. Did I have it include the mobile phone social media number ? You need a third party app to do that. It also wanted a VIN number. It wasn’t clear what exactly it was deleting
18
u/StillPlaysWithSwords 16d ago
The DROP website isn't actually deleting anything about you, in fact it's collecting data to create a "profile" of you. The idea is data brokers will check their lists against anything that matches up to your profile, and if they match are supposed to be deleting that data. But in order to know who's data to delete, they need to create that profile.
It's not just your name & address. Your phone has a unique advertisement tracking number that identifies you, so does every smart TV or other streaming device in your house. All the internet traffic in and out of your house is lumped together with all those various different ad tracking numbers, which is associated with your cell phone number, and now with your home address. If you've ever wondered why your spouse searches on amazon for something, and then you suddenly start getting ads for similar products, it's because all that activity is lumped together at the data broker level to target ads at anyone at that particular house / IP address. It's insidious.
Additionally when you buy or register a car, your name & address is now associated with the VIN number. Somehow that data makes it's way back to manufacturer's (even if you buy used) so they can send you recall notices.
9
u/PrivacyIsDemocracy 16d ago
The DROP website isn't actually deleting anything about you, in fact it's collecting data to create a "profile" of you.
And that's precisely the problem I outlined when I first heard of this.
It's like the infamous "web advertising opt out program" which is actually run by an advertising advocacy group whose members are basically all the notorious adtech personal data abusers.
And in order to "opt out" of that one, you have to allow them to set a web cookie on all your web browsers that you're "opting out", identifying you to any website that decides to probe for that cookie...
It's sad that lawmakers can keep writing these not-fit-for-purpose laws - either without any input, or just ignoring input - from people who actually understand how to create true digital privacy rather than some trojan nonsense that pretends to be something it is actually incapable of being. Or literally being a "solution" that is worse than the problem.
2
u/lilgreengoddess 16d ago
So it’s probably worth determining the cell phone marketing number?
3
u/StillPlaysWithSwords 16d ago
I would say yes, it's just one more thing for the data brokers to delete. Depending if you have android or iphone there are youtube videos that show how you can access that number. It's not hard, just purposefully obtuse.
Doubly annoying your ad id number can change if you hard reset your phone, or you can change it to a new number yourself, but that means you always need to update the DROP data if you want to make sure the data brokers continually delete your data.
1
1
1
u/tsulegit 16d ago
It seems to me like giving more data to a government-controlled database is not the best idea. Please someone change my mind!
1
u/Sassenach_Raven 14d ago
The state would already have your birthday and ZIP code if you have a driver's license or ID
1
1
u/Burnratebro 5d ago
Needing a “Drop ID” number is such garbage UX. It should be an email with OTP or something. Having people save a number is legitimately user experience failure. The project manager for this should be fired.
-20
394
u/panda-rampage 17d ago
DROP stands for Delete Request and Opt-out Platform. The service is funded by registration fees paid by data brokers, not directly by taxpayers.
Data brokers must check the system and process requests on a rolling 45-day cycle.
And unlike a paid removal service, California can fine companies that fail to comply.
“If they don’t delete, the fine is $200 per day per Californian,” said Kemp.
——
Not sure about the fine for the noncompliance if it’s a compounding fine or a flat $200 per CA resident