Enforcement of California's Delete Request and Opt-Out Platform (DROP) began August 1. Data brokers now face fines of $200 per request, per day. The first thing to figure out is whether California considers you one.
If you run an ecommerce site, the tools you use every day, like ad pixels, session replay, chat widgets, even your search bar, are the same tools fueling a wave of lawsuits in California right now.
Privacy laws have been moving quickly this year. Vermont became the fourth state in 2026 to pass a comprehensive privacy law, joining Oklahoma, Alabama, and Louisiana.
