For California-registered data brokers

Every DROP deletion request closed inside its 45-day window

California's data broker registry puts a 45-day clock on each deletion request that reaches you through the DROP platform, and $200 a day per request once that clock runs out. We log in on a fixed schedule and close each one before it becomes a fine.

A standing schedule, a record of every run, and nothing to install.

One deletion request, one clockillustrative
Day 1request lands in DROP
Closed on scheduleprocessed and logged inside the window
$200 / dayfor every request still open after day 45
Ten requests missed by a month is $60,000. The clock does not wait for someone to remember.
The obligation

What being on the registry now requires

The Delete Request and Opt-out Platform (DROP) is California's single channel for consumer deletion requests. If your company is listed on the state's data broker registry, these are the numbers that apply.

45 days

The window to process each deletion request delivered through DROP, from the day it becomes available to you.

$200 / day

The penalty rate for each request left unprocessed once its window has passed, accruing per request, per day.

Ongoing

New requests keep arriving. This is not a one-time clean-up; it is a recurring processing cycle for as long as the registry lists you.

The exposure is not the size of any one request. It is a queue nobody owns, checked whenever there is time, and a rate that compounds quietly by the day.

How the clock runs

The same request, with and without a schedule

Request lands

A consumer's deletion request becomes available to your company in DROP. The 45-day window starts.

Scheduled run

On our next run we download the current list, process each request against your records, and log the outcome.

Second pass

Anything that arrived since the last run is picked up on the next one. Nothing sits waiting for a reminder.

Without a schedule

A request that was never picked up starts costing $200 a day, and keeps costing that until someone notices.

The service

Scheduled DROP processing, done as a routine

One recurring task, handled the same way every cycle, with a record you can show.

A fixed cadence

Runs land on a set schedule well inside the 45-day window, so every request is processed on the same rhythm regardless of who is on holiday.

Every request closed out

Each request on the list is processed and its status recorded. Nothing is skipped, deferred, or left to the next person.

A record of every run

After each run you receive a plain summary: requests found, requests processed, dates, and anything that needed your attention. It is the evidence you keep.

Nothing to install

No software in your systems and no change to how your data is stored. The work happens in DROP, on the schedule, and the results come to you.

How it works

Three steps, and the first one is a 15 minute call

1

A short call

We confirm your registry listing, how requests are reaching you today, and who currently owns the queue, if anyone does.

2

Access and schedule

We agree the run cadence and how processing is carried out against your records. We walk through access and data handling on the call, before anything starts.

3

Runs and records

Runs happen on schedule. Each one ends with a summary in your inbox. You see the queue closed without touching it.

What you get

A queue that is always at zero, and proof of it

The point is not only to avoid the penalty. It is to be able to show, for any date, that every request that had reached you was processed inside its window. Each run summary is a dated record of exactly that.

If a run turns up something that needs a decision from your side, it is flagged in the same summary, with the date the window closes.

Run summaryillustrative
ItemResult
Requests available in DROP14
Processed this run14 of 14
Oldest request age at processing9 days
Requests past their window0
Needs your decision1 (flagged, window closes in 31 days)
Next scheduled run in 14 days. Summary delivered to your inbox on the day of each run.
Questions

The questions that come up first

Who is this for?

Companies listed on California's data broker registry that receive deletion requests through DROP and do not have a dependable, owned process for clearing them on time.

We already check DROP. Why would we need this?

Most offices do check it, when someone remembers. The risk is the request that arrives the week the person who checks is away. A fixed schedule removes the memory from the process.

What does "processing" involve on your side?

Downloading the current request list on each run, carrying out the processing against your records in the way we agree on the setup call, recording the outcome for each request, and sending you the summary.

What do you need from us?

Confirmation of your registry listing, agreement on the cadence, and the access needed to carry out the runs. Exactly what that access looks like, and how it is protected, is settled on the call before anything begins.

Is this legal advice?

No. It is an operational service that keeps the processing cycle running on time. Questions about your obligations under the law belong with your counsel; we are happy to work alongside them.

What does it cost?

A flat monthly arrangement, agreed on the call once we know your request volume and cadence. No per-request charges and no setup fee.

Who is behind this?

StateLine Compliance, based in Burlington, Ontario. You deal with one person from the first call to every run summary, and that person's direct email is below.

Can we stop?

Yes, at any time, with your run records kept. The schedule exists to protect you, not to hold you.

Find out where your queue stands today

A 15 minute call is enough to confirm your listing, see how requests are reaching you, and set a schedule if it makes sense.

Book a 15 minute call

Or email aleks@alurigroup.com