Is Cox Automotive, Inc. covered by California DROP?
Yes — in DROP scope. Cox Automotive, Inc. is listed on the 2026 California Data Broker Registry. Registered data brokers must process deletion requests submitted through DROP, starting August 1, 2026.
Unverified: we have not confirmed this broker in DROP's own in-app broker list (that list is only visible inside DROP). Registry data last modified July 29, 2026.
Possible partial exemptions. This broker told the registry that it, or a subsidiary, is regulated by: GLBA. Information covered by those laws may be exempt from deletion, so a DROP request may result in a partial deletion or an “Exempted” status (see privacy.ca.gov). This is our reading of the broker's own answers, not a legal determination.
Registration information
| Registered name | Cox Automotive, Inc. |
|---|---|
| Doing business as | — |
| Website | www.coxautoinc.com www.autotrader.com www.fordblueadvantage.com www.kbb.com |
| Privacy rights / deletion page | https://www.coxautoinc.com/privacy-statement/ https://www.coxautoinc.com/consumerprivacyrights/ |
| Contact email (as registered) | consumer-privacy-ops@coxautoinc.com |
| Phone (as registered) | 866-288-6872 |
| Address (as registered) | 6205 Peachtree Dunwoody Rd., Atlanta, GA, 30328, UNITED STATES |
| Registry years found |
Earlier years are matched to previous CPPA/DOJ registry files by name or website and may miss renamed companies. |
Data categories it reports collecting
The registry asks every broker Yes/No questions about these specific categories. It does not list everything a broker collects.
| Personal information of minors | No |
|---|---|
| Account logins / account numbers with security codes | No |
| Government-issued ID numbers | Yes |
| Citizenship / immigration status | Yes |
| Union membership status | No |
| Sexual orientation | No |
| Gender identity / expression | Yes |
| Biometric data | Yes |
| Precise geolocation | Yes |
| Reproductive health care data | No |
Who it says it sold or shared data with (past year)
| A foreign actor | No |
|---|---|
| The federal government | No |
| Other state governments | No |
| Law enforcement (except when required by subpoena or court order) | No |
| A developer of a generative AI system or model | No |
Regulation under other privacy laws
| Fair Credit Reporting Act (FCRA) | No |
|---|---|
| Gramm-Leach-Bliley Act (GLBA) | Yes |
| California Insurance Information and Privacy Protection Act (IIPPA) | No |
| California Confidentiality of Medical Information Act (CMIA) | No |
| HIPAA (HIPAA) | No |
Consumer request metrics it reported
Shown exactly as reported. Column labels are the CPPA's; they reference 2024 even though the CPPA page describes this registry as covering 2025 activity.
| Requests to delete - Total requests received | 107 |
|---|---|
| Requests to delete - Total requests received - Complied in whole | 47 |
| Requests to delete - Total requests received - Complied in part | 0 |
| Requests to delete - Total requests received - Denied | 60 |
| Requests to delete - The number of days to respond substantively to a request to delete in 2024 - Mean | 45 |
| Requests to delete - The number of days to respond substantively to a request to delete in 2024 - Median | 43 |
| Requests to know what personal information is being collected - Total requests received | 67 |
| Requests to know what personal information is being collected - Total requests received - Complied in whole | 11 |
| Requests to know what personal information is being collected - Total requests received - Complied in part | 0 |
| Requests to know what personal information is being collected - Total requests received - Denied | 56 |
| Requests to know what personal information is being collected - The number of days to respond substantively to a request to know in 2024 - Mean | 43 |
| Requests to know what personal information is being collected - The number of days to respond substantively to a request to know in 2024 - Median | 42 |
| Requests to know what personal information is sold or shared - Total requests received | 67 |
| Requests to know what personal information is sold or shared - Total requests received - Complied in whole | 11 |
| Requests to know what personal information is sold or shared - Total requests received - Complied in part | 0 |
| Requests to know what personal information is sold or shared - Total requests received - Denied | 56 |
| Requests to know what personal information is sold or shared - The number of days to respond substantively to a request to know what personal information is sold or shared in 2024 - Mean | 43 |
| Requests to know what personal information is sold or shared - The number of days to respond substantively to a request to know what personal information is sold or shared in 2024 - Median | 42 |
| Requests to opt out of sale or sharing - Total requests received | 1674 |
| Requests to opt out of sale or sharing - Total requests received - Complied in whole | 1674 |
| Requests to opt out of sale or sharing - Total requests received - Complied in part | 0 |
| Requests to opt out of sale or sharing - Total requests received - Denied | 0 |
| Requests to opt out of sale or sharing - The number of days to respond substantively to a request to know in 2024 - Mean | 18 |
| Requests to opt out of sale or sharing - The number of days to respond substantively to a request to know in 2024 - Median | 17 |
| Requests to limit the use and disclosure of sensitive personal information - Total requests received | 93 |
| Requests to limit the use and disclosure of sensitive personal information - Total requests received - Complied in whole | 93 |
| Requests to limit the use and disclosure of sensitive personal information - Total requests received - Complied in part | 0 |
| Requests to limit the use and disclosure of sensitive personal information - Total requests received - Denied | 0 |
| Requests to limit the use and disclosure of sensitive personal information - The number of days to respond substantively to a request to know in 2024 - Mean | 39 |
| Requests to limit the use and disclosure of sensitive personal information - The number of days to respond substantively to a request to know in 2024 - Median | 42 |
Additional comments from the broker
Cox Automotive, Inc. acts as the data broker.
Sources
- California Data Broker Registry (CPPA) — registry CSV, last modified July 29, 2026, retrieved October 17, 2026
- How DROP works (privacy.ca.gov)