Cal Privacy walks data brokers through Drop'level technical steps: hashing, lists, API and sandbox testing

Jun 11, 2026

Agency technical staff explained the four'step operational workflow (download, standardize/hash, match, report), hashing rules (SHA'256 then base64), file formats, expected first'download size and API endpoints (download/upload/amend), and encouraged sandbox testing ahead of the Aug. 1 obligation.

The full story

Shannon Dell, product manager for Drop at the California Privacy Protection Agency, and technical staff led a deep'dive on how data brokers should implement Drop integrations and manual workflows. They framed the work as four recurring steps brokers must repeat at least every 45 days: download lists, standardize and hash records, match and process, then report statuses back to Drop.

Free newsletter

Sign up to keep reading.

Your free newsletter brings you what your city council, county, and school board discussed and decided.

or
Already have an account? Sign in