DROP and data deletion: is your identity resolution ready?

TL;DR: California’s DROP platform has turned deletion and opt-out processing into a recurring identity resolution test, with 566 registered data brokers facing 45-day checks, more than 300,000 consumer requests already filed, and fines of $200 per request per day, according to Transcend. The control failure is not legal awareness but the ability to match, assemble, execute, and report deletions across fragmented records at infrastructure speed.

Editorial analysis by NHI Mgmt Group, based on content published by Transcend: “DROP isn't a compliance deadline. It's an infrastructure test.”.

Key questions

Q: What breaks when deletion requests cannot be resolved to one person?

A: The workflow breaks at the point where matching becomes reporting.

Q: Why do privacy deletion workflows need identity resolution rather than ticketing alone?

A: Ticketing tracks work, but identity resolution determines whether the work is correct.

Q: What are the signs that deletion compliance is failing at scale?

A: Common warning signs include manual report-back preparation, repeated re-matching of the same consumer, disconnected deletions across systems, and growing delay as request volume rises.

Practitioner guidance

• Define a person-scoped deletion workflow Map every incoming DROP request to a single resolved person record before any downstream deletion starts, then use that resolved identity to drive all system-level actions.
• Automate cross-system erasure and proof Replace spreadsheet-driven follow-up with an executable workflow that deletes data in every configured system and emits the report-back evidence automatically.
• Assign ownership to data platform teams Move DROP execution out of legal queue management and into the engineering group responsible for the data stack, system connectors, and audit trail generation.

Bottom line: DROP converts consumer deletion into an identity resolution problem because the same person can appear in multiple hashed list types with no shared identifier.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →