# CalPrivacy DROP Data Broker API

**Canonical:** https://apis.io/apis/ccpa/drop-data-broker-api/  
**Provider:** CCPA (California Consumer Privacy Act) — https://apis.io/providers/ccpa/  
**Base URL:** https://api.drop.privacy.ca.gov  
**Documentation:** https://privacy.ca.gov/drop-for-data-brokers/technical-specifications/

CalPrivacy DROP Data Broker API is one of 5 APIs that [CCPA (California Consumer Privacy Act)](https://apis.io/providers/ccpa/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. Tagged areas include Data Brokers, Delete Act, Deletion Requests, DROP, and Regulator API. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, an API reference, and a getting-started guide.

The Delete Request and Opt-out Platform (DROP) Data Broker API is the statutory integration surface California's Delete Act requires of every registered data broker. Brokers call GET /data/download to retrieve a ZIP of CSV files holding SHA-256 hashed consumer deletion identifiers, match those hashes against their own records, act, then report a status per work item with POST /data/upload (2 Exempted, 3 Deleted, 4 Opted out, 5 Not found), correcting a prior filing with POST /data/amend. Operated by the California Privacy Protection Agency (CalPrivacy), authenticated with an X-API-KEY issued in the Data Broker Portal after annual registration and fee payment. OpenAPI 3.1.0, description version 1.2.0. Processing became mandatory for registered brokers on 2026-08-01.

## Operations (3)

| Method | Path | Summary |
|---|---|---|
| GET | `/data/download` | Request or download consumer deletion request data |
| POST | `/data/upload` | Upload new status response files |
| POST | `/data/amend` | Correct or update previously submitted status responses |

## Machine-readable artifacts (9)

- **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/ccpa/refs/heads/main/openapi/ccpa-drop-databroker-api.yml
- **Specification** — https://dropresources.blob.core.windows.net/apidocs/databroker_api.yaml
- **Documentation** — https://privacy.ca.gov/drop-for-data-brokers/technical-specifications/
- **APIReference** — https://privacy.ca.gov/drop-for-data-brokers/technical-specifications/api-operations/
- **GettingStarted** — https://privacy.ca.gov/drop-for-data-brokers/technical-specifications/getting-started/
- **Documentation** — https://privacy.ca.gov/drop-for-data-brokers/technical-specifications/integration-workflow/
- **Documentation** — https://privacy.ca.gov/drop-for-data-brokers/technical-specifications/working-with-data/
- **Reference** — https://privacy.ca.gov/drop-for-data-brokers/technical-specifications/reference/
- **Portal** — https://databroker.drop.privacy.ca.gov/

## Other CCPA (California Consumer Privacy Act) APIs (4)

- [Global Privacy Control (GPC) Specification](https://apis.io/apis/ccpa/global-privacy-control/)
- [IAB Tech Lab Global Privacy Platform (GPP)](https://apis.io/apis/ccpa/iab-gpp/)
- [California Privacy Protection Agency (CPPA) Resources](https://apis.io/apis/ccpa/cppa-enforcement-resources/)
- [California Data Broker Registry](https://apis.io/apis/ccpa/ca-data-broker-registry/)

## Tags

Data Brokers, Delete Act, Deletion Requests, DROP, Regulator API

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/ccpa/drop-data-broker-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/ccpa/.