A business that sells or shares personal data of people it has no direct relationship with - an affiliate network trading traffic data, a platform selling lists - is a data broker. California (the Delete Act) and Vermont want a registration every year by January 31; Texas by September 1; Oregon on its own date. California charges $200 for each day a broker goes unregistered.
From August 1, 2026, California's Delete Request and Opt-out Platform (DROP) lets a consumer ask every registered broker to delete their data at once. A broker has to pull the requests from DROP at least every 45 days and process every one. Clearwater keeps the dates and the counts - never a name, an email or an identifier from the list.