Cal Privacy walks data brokers through Drop'level technical steps: hashing, lists, API and sandbox testing
Jun 11, 2026
Agency technical staff explained the four'step operational workflow (download, standardize/hash, match, report), hashing rules (SHA'256 then base64), file formats, expected first'download size and API endpoints (download/upload/amend), and encouraged sandbox testing ahead of the Aug. 1 obligation.
The full story
Shannon Dell, product manager for Drop at the California Privacy Protection Agency, and technical staff led a deep'dive on how data brokers should implement Drop integrations and manual workflows. They framed the work as four recurring steps brokers must repeat at least every 45 days: download lists, standardize and hash records, match and process, then report statuses back to Drop.
Sign up to keep reading.
Your free newsletter brings you what your city council, county, and school board discussed and decided.
Keep reading for free
Create a free account to finish this story and see the video, transcript and key details.
Continue with GoogleContinue with emailAlready have an account? Log in →