Is BDO GCI, LLC covered by California DROP?
Yes — in DROP scope. BDO GCI, LLC is listed on the 2026 California Data Broker Registry. Registered data brokers must process deletion requests submitted through DROP, starting August 1, 2026.
Unverified: we have not confirmed this broker in DROP's own in-app broker list (that list is only visible inside DROP). Registry data last modified July 29, 2026.
The broker answered “No” (or did not answer) for regulation under FCRA, GLBA, IIPPA, CMIA and HIPAA. Other exemptions (for example publicly available information or data you gave the business directly) can still apply.
Registration information
| Registered name | BDO GCI, LLC |
|---|---|
| Doing business as | — |
| Website | https://www.bdo.com |
| Privacy rights / deletion page | www.bdo.com |
| Contact email (as registered) | privacy@bdo-gci.com |
| Phone (as registered) | 6165758785 |
| Address (as registered) | 330 North Wabash Avenue, Suite 3200, Chicago, IL, 60611, UNITED STATES |
| Registry years found |
Earlier years are matched to previous CPPA/DOJ registry files by name or website and may miss renamed companies. |
Data categories it reports collecting
The registry asks every broker Yes/No questions about these specific categories. It does not list everything a broker collects.
| Personal information of minors | Yes |
|---|---|
| Account logins / account numbers with security codes | No |
| Government-issued ID numbers | Yes |
| Citizenship / immigration status | Yes |
| Union membership status | Yes |
| Sexual orientation | No |
| Gender identity / expression | No |
| Biometric data | No |
| Precise geolocation | No |
| Reproductive health care data | No |
Who it says it sold or shared data with (past year)
| A foreign actor | No |
|---|---|
| The federal government | No |
| Other state governments | Yes |
| Law enforcement (except when required by subpoena or court order) | No |
| A developer of a generative AI system or model | No |
Regulation under other privacy laws
| Fair Credit Reporting Act (FCRA) | No |
|---|---|
| Gramm-Leach-Bliley Act (GLBA) | No |
| California Insurance Information and Privacy Protection Act (IIPPA) | No |
| California Confidentiality of Medical Information Act (CMIA) | No |
| HIPAA (HIPAA) | No |
Consumer request metrics it reported
Shown exactly as reported. Column labels are the CPPA's; they reference 2024 even though the CPPA page describes this registry as covering 2025 activity.
| Requests to delete - Total requests received | 0 |
|---|---|
| Requests to delete - Total requests received - Complied in whole | 0 |
| Requests to delete - Total requests received - Complied in part | 0 |
| Requests to delete - Total requests received - Denied | 0 |
| Requests to delete - The number of days to respond substantively to a request to delete in 2024 - Mean | 0 |
| Requests to delete - The number of days to respond substantively to a request to delete in 2024 - Median | 0 |
| Requests to know what personal information is being collected - Total requests received | 0 |
| Requests to know what personal information is being collected - Total requests received - Complied in whole | 0 |
| Requests to know what personal information is being collected - Total requests received - Complied in part | 0 |
| Requests to know what personal information is being collected - Total requests received - Denied | 0 |
| Requests to know what personal information is being collected - The number of days to respond substantively to a request to know in 2024 - Mean | 0 |
| Requests to know what personal information is being collected - The number of days to respond substantively to a request to know in 2024 - Median | 0 |
| Requests to know what personal information is sold or shared - Total requests received | 0 |
| Requests to know what personal information is sold or shared - Total requests received - Complied in whole | 0 |
| Requests to know what personal information is sold or shared - Total requests received - Complied in part | 0 |
| Requests to know what personal information is sold or shared - Total requests received - Denied | 0 |
| Requests to know what personal information is sold or shared - The number of days to respond substantively to a request to know what personal information is sold or shared in 2024 - Mean | 0 |
| Requests to know what personal information is sold or shared - The number of days to respond substantively to a request to know what personal information is sold or shared in 2024 - Median | 0 |
| Requests to opt out of sale or sharing - Total requests received | 0 |
| Requests to opt out of sale or sharing - Total requests received - Complied in whole | 0 |
| Requests to opt out of sale or sharing - Total requests received - Complied in part | 0 |
| Requests to opt out of sale or sharing - Total requests received - Denied | 0 |
| Requests to opt out of sale or sharing - The number of days to respond substantively to a request to know in 2024 - Mean | 0 |
| Requests to opt out of sale or sharing - The number of days to respond substantively to a request to know in 2024 - Median | 0 |
| Requests to limit the use and disclosure of sensitive personal information - Total requests received | 0 |
| Requests to limit the use and disclosure of sensitive personal information - Total requests received - Complied in whole | 0 |
| Requests to limit the use and disclosure of sensitive personal information - Total requests received - Complied in part | 0 |
| Requests to limit the use and disclosure of sensitive personal information - Total requests received - Denied | 0 |
| Requests to limit the use and disclosure of sensitive personal information - The number of days to respond substantively to a request to know in 2024 - Mean | 0 |
| Requests to limit the use and disclosure of sensitive personal information - The number of days to respond substantively to a request to know in 2024 - Median | 0 |
Additional comments from the broker
BDO’s Global Corporate Intelligence services were previously registered as part of BDO USA, P.C., which is no longer a data broker under California law. BDO GCI, LLC was formed in January 2025, and did not receive any data subject requests in 2024. For the period beginning on January 1, 2024, and ending on December 31, 2024, BDO has compiled the following statistics regarding individual requests to know, access, delete, and opt out of sale, sharing and/or targeted advertising: BDO received 48,984 total requests, complied with 42,936 of these requests in whole or in part, denied 6,048 requests and responded to these requests with a median response timeline of 0 days and a mean of 1 day. Of these requests, 2 deletion requests involved data that BDO USA did not delete pursuant to exceptions under Sections 1798.145 or 1798.146 of the California Consumer Privacy Act of 2018. For this request, BDO USA relied on the exceptions covering our ability to “comply with federal, state, or local laws,” “comply with a civil, criminal, or regulatory inquiry, investigation, subpoena, or summons by federal, state, or local authorities,” and “exercise or defend legal claims.” Please note that the number of “Denied” requests includes abandoned requests by the consumer and failed identity verification attempts. In particular, BDO has received large numbers of deletion requests from authorized agents that have been nonresponsive to our attempts to process these requests. Additionally, please note that these metrics include requests we received at the end of 2024 and responded to in 2025.
Sources
- California Data Broker Registry (CPPA) — registry CSV, last modified July 29, 2026, retrieved October 17, 2026
- How DROP works (privacy.ca.gov)