Tool
California Data Broker Registry Explorer
Every business registered as a data broker with the California Privacy Protection Agency has to disclose how many deletion requests it received, how many it honored, and how long it took. That is public record, and almost nobody reads it. This is a searchable view of it.
Searches 603 entities registered with the California Privacy Protection Agency, plus 15 known consumer-brand aliases. Nothing you type is stored or sent anywhere.
603
Registered data brokers
58,031,327
Deletion requests reported
100.0%
Typical registrant complies with
median across registrants
5 days
Median response time
What the 603 registrants disclosed
Across the 439 registrants reporting at least one request, consumers filed 58,031,327 deletion requests. 98.2% were complied with in whole and 1.5% were denied.
Read that aggregate carefully. It is volume-weighted, and volume is extremely concentrated: Cuebiq Group, LLC alone accounts for 45.3% of every deletion request in the dataset, and the twelve largest account for roughly three-quarters. So 98.2% describes the biggest brokers, not a typical one.
The unweighted figure is the more useful one for an operator: the median registrant complied in full with 100.0% of the deletion requests it received, with a median response time of 5 days.
A denial is not automatically a violation — a request can be denied because the business holds no data on that consumer, or because identity could not be verified. The registry records the outcome, not the reason, so treat a high denial rate as a question worth asking rather than a finding.
115 of 603 registrants collect precise geolocation.
32 of 603 registrants shared or sold data to a GenAI developer in the past year.
28 of 603 registrants shared or sold data to law enforcement in the past year.
18 of 603 registrants collect personal information of minors.
12 of 603 registrants collect biometric data.
8 of 603 registrants collect reproductive health care data.
Why a domain search can miss
Consumer brands rarely register under the name on the website. thatsthem.com is registered as Spokeo, Inc. Six people-search brands — cyberbackgroundchecks.com, peoplesearchnow.com, searchpeoplefree.com, smartbackgroundchecks.com, usa-people-search.com and usphonebook.com — all sit behind a single registration. clearbit.com is HubSpot.
That is why this tool says “no registry match found” and never “not registered.” When we tested a naive domain match, of roughly 174 domains it called unregistered, only 15 could be resolved to a registrant — the other ~159 were unconfirmed, not confirmed absent. A compliance publisher asserting a company is unregistered, on data that cannot support it, is a credibility loss you cannot buy back.
Source and method
- Source: CPPA data broker registry (registry.csv), snapshot 2026-08-06, 77 columns, 603 registrants.
- The registry grows continuously, so this is a dated snapshot. Check the official registry for the current position before relying on it.
- Registrants’ contact email addresses are in the source file and are public record. We deliberately do not republish them — a searchable page of privacy-inbox addresses would be a gift to spammers aimed at the desks that process consumer deletion requests. Each entry links to the registrant’s own consumer-rights page instead.
- Counting note: the source CSV embeds newlines inside quoted fields, so a line count badly overstates it — 867 lines for 603 records. The figures here come from a parsed count.
If you might be on this list
Registration is required of any business that knowingly collects and sells personal information about consumers it has no direct relationship with. If you are not sure whether that describes you, the data-broker self-check walks the statutory definition, and the DROP deadline tracker covers the dates. Background on the law is in the Delete Act and DROP explainer.
This is an educational tool, not legal advice. It offers general, best-practice guidance from an operator's perspective and does not account for your specific facts or jurisdiction. Using it does not create an attorney–client relationship. For advice on your situation, consult qualified counsel.