Trust Center
State Data Broker Registrations
Registered data brokers must publish or link registry entries in several U.S. states. This page indexes GSDSI disclosures for procurement and privacy teams.
California registration is verifiable in the CPPA Data Broker Registry. Vermont, Texas, and Oregon registration numbers in the table below are confirmed against 2026 state filings. Connecticut's Public Act 26-64 takes effect October 1, 2026 and requires registration to sell or license brokered personal data in Connecticut on or after January 1, 2027. For each state's registration deadline, fee and penalty, see our state data broker registration tracker.
California Delete Act (DROP): From August 1, 2026, registered data brokers must process eligible consumer deletion requests submitted through the state DROP platform at least every 45 days. GSDSI is implementing operational workflows; consumers may also use our Do Not Sell page and the official CPPA DROP platform at cppa.ca.gov/data_brokers.
| State | Law | GSDSI status | Registry |
|---|---|---|---|
| California | Civ. Code §1798.99.82 (Delete Act) | Registered with the California Privacy Protection Agency under the Delete Act: view our listing in the CPPA Data Broker Registry | CPPA Data Broker Registry |
| Vermont | 9 V.S.A. §2446 | Registered, W2026R0127861 | Vermont Secretary of State |
| Texas | Bus. & Com. Code ch. 510 (SB 2105, 2023) | Registered, 20260018 (effective January 20, 2026) | Texas Secretary of State |
| Oregon | ORS 646A.593 (HB 2052, 2023) | Registered, DATA-00413 (effective January 2, 2026) | Oregon Division of Financial Regulation |
| Connecticut | Public Act 26-64 (SB 4) | Not yet registered. Public Act 26-64 takes effect October 1, 2026 and requires registration to sell or license brokered personal data in Connecticut on or after January 1, 2027 | Connecticut Department of Consumer Protection |
Last updated: . For consumer rights requests see Privacy Center and Do Not Sell. For subprocessors see Sub-processors.
Compliance questions