According to the California Privacy Protection Agency (CalPrivacy), which was responsible for DROP's release, it's a "first of its kind" tool that imposes new restrictions on businesses that hoard and sell personal info that consumers didn't provide directly. The process requires verifying your California residency before you can send a "single deletion request to every registered data broker in California." On the other end, CalPrivacy will require data brokers to register every year and to process any deletion requests from DROP. Data brokers will also have to report the type of information they collect and share, while also being subject to regular audits that check for compliance.