California data broker registration is annual, and the date does not move. Every business that meets the state's definition of a data broker registers with the California Privacy Protection Agency by January 31 and pays the registration fee for that year. Registering late is the thing the agency has actually fined companies for, so the date is worth putting in a calendar rather than a memory.
What the deadline covers
- Registering, or renewing, on the state's Data Broker Portal for the calendar year.
- Answering the disclosure questions the registration form asks, including the categories of personal information you handle and who you share it with.
- Paying the annual fee to the state, on the state portal.
What it costs
The published annual registration fee is $6,000, plus the portal's processing fee. It is paid to the state, on the state's own portal, not to any vendor. Check the current figure on the agency's registration page before you pay: the fee is set by the state and can change between years.
Registration is not the whole duty
Registering puts you on the public register. It does not satisfy the other half of the Delete Act, which is the deletion work: a registered broker has to access the state's Delete Request and Opt-out Platform at least once every 45 days, match what is in it against its own records, and file a status for every match. Read how the 45 day cycle works if that part is new.
What to keep after you file
- The confirmation number the portal gives you, and the date you filed.
- A copy of the disclosure answers you submitted, so next year's filing starts from what you actually said.
- The receipt for the fee.
DropDue does not file your registration. The registration is yours to file on the state portal, and what this product does is keep the date, the confirmation number and the deletion record that follows it. See how to register for the steps.