Original analysis, grounded in primary sources
News & research
Explainers, case studies and regulatory notes written for this library. Each entry links to the government or primary source behind it and separates what the source says from our reading of it.
What California's DROP platform actually does — and what it doesn't
DROP is a free, state-run deletion mechanism for eligible California residents. It is genuinely useful and it is also deliberately limited: it covers registered data brokers, has reporting timelines measured in months, and excludes some kinds of information entirely.
Data brokers · Personal-data deletion · Data rights · Consumer privacy
Disputing is not deleting: what the FCRA actually gives you
The Fair Credit Reporting Act is powerful, but it is an accuracy statute. It gives you a dispute right tied to consumer reports and credit files — not a general right to erase accurate facts from every database.
Consumer reporting · Data rights · Personal-data deletion
Florida's Digital Bill of Rights: real rights, narrow reach
Florida gives consumers access, correction, deletion, portability and several opt-outs, including for precise geolocation and voice/facial-recognition data. The catch is who the law applies to — and it is not everyone.
Data rights · Consumer privacy · Sensitive personal information
PADFAA: the data-broker rule that isn't a deletion right
A federal law makes it unlawful for data brokers to transfer personally identifiable sensitive data of U.S. individuals to foreign adversaries — but it offers consumers no personal deletion mechanism. It is a national-security restriction, and it is worth reading precisely.
Sensitive personal information · Data brokers · Enforcement · Location tracking
GM agreed to pay $220 million over the sale of drivers' data
A bipartisan coalition of 36 attorneys general announced a $220 million settlement with General Motors over driving and location data it sold to data brokers, which the data brokers then sold to insurers. The announcement says the settlement does not describe the deal as an admission of liability.
Data brokers · Enforcement · Location tracking · Consumer privacy
California's data-broker enforcement round: two new decisions
CalPrivacy's board issued two decisions in January 2026 against data brokers for failing to register under the Delete Act — one a Texas-based reseller of health-condition marketing lists, the other a large data and technology provider that the agency describes as an administrative error.
Data brokers · Enforcement · Personal-data deletion · Sensitive personal information
No entries match those filters.
Every entry carries at least one primary source. Where we could not verify a source from this environment, we say so on the entry rather than paraphrasing it as fact.