Is Deloitte Consulting LLP covered by California DROP?
Yes — in DROP scope. Deloitte Consulting LLP is listed on the 2026 California Data Broker Registry. Registered data brokers must process deletion requests submitted through DROP, starting August 1, 2026.
Unverified: we have not confirmed this broker in DROP's own in-app broker list (that list is only visible inside DROP). Registry data last modified July 29, 2026.
Possible partial exemptions. This broker told the registry that it, or a subsidiary, is regulated by: HIPAA. Information covered by those laws may be exempt from deletion, so a DROP request may result in a partial deletion or an “Exempted” status (see privacy.ca.gov). This is our reading of the broker's own answers, not a legal determination.
Registration information
| Registered name | Deloitte Consulting LLP |
|---|---|
| Doing business as | — |
| Website | www.deloitte.com https://healthprism.ai https://peopleprism.ai https://giveprism.ai |
| Privacy rights / deletion page | https://datasubject.deloitte.com/ |
| Contact email (as registered) | usprivacyquestions@deloitte.com |
| Phone (as registered) | 8449190711 |
| Address (as registered) | 115 Federal Street, Boston, MA, 02110, UNITED STATES |
| Registry years found |
Earlier years are matched to previous CPPA/DOJ registry files by name or website and may miss renamed companies. |
Data categories it reports collecting
The registry asks every broker Yes/No questions about these specific categories. It does not list everything a broker collects.
| Personal information of minors | No |
|---|---|
| Account logins / account numbers with security codes | No |
| Government-issued ID numbers | No |
| Citizenship / immigration status | No |
| Union membership status | No |
| Sexual orientation | No |
| Gender identity / expression | Yes |
| Biometric data | No |
| Precise geolocation | No |
| Reproductive health care data | No |
Who it says it sold or shared data with (past year)
| A foreign actor | No |
|---|---|
| The federal government | Yes |
| Other state governments | Yes |
| Law enforcement (except when required by subpoena or court order) | No |
| A developer of a generative AI system or model | No |
Regulation under other privacy laws
| Fair Credit Reporting Act (FCRA) | No |
|---|---|
| Gramm-Leach-Bliley Act (GLBA) | No |
| California Insurance Information and Privacy Protection Act (IIPPA) | No |
| California Confidentiality of Medical Information Act (CMIA) | No |
| HIPAA (HIPAA) | YesIf the data broker or its subsidiaries are regulated by HIPAA, describe the types of personal information coveredWe are subject to HIPAA when acting as a business associate providing certain services to covered entities. However, we do not sell or share any PHI as part of our data broker products/services. If the data broker or its subsidiaries are regulated by HIPAA, describe the specific products or services coveredWe are subject to HIPAA when acting as a business associate providing certain services to covered entities. However, we do not sell or share any PHI as part of our data broker products/services. If the data broker or its subsidiaries are regulated by HIPAA, describe the percentage of data activities coveredZero. We are subject to HIPAA when acting as a business associate providing certain services to covered entities. However, we do not sell or share any PHI as part of our data broker products/services. |
Consumer request metrics it reported
Shown exactly as reported. Column labels are the CPPA's; they reference 2024 even though the CPPA page describes this registry as covering 2025 activity.
| Requests to delete - Total requests received | 835 |
|---|---|
| Requests to delete - Total requests received - Complied in whole | 823 |
| Requests to delete - Total requests received - Complied in part | 7 |
| Requests to delete - Total requests received - Denied | 5 |
| Requests to delete - The number of days to respond substantively to a request to delete in 2024 - Mean | 19 |
| Requests to delete - The number of days to respond substantively to a request to delete in 2024 - Median | 20 |
| Requests to know what personal information is being collected - Total requests received | 5 |
| Requests to know what personal information is being collected - Total requests received - Complied in whole | 5 |
| Requests to know what personal information is being collected - Total requests received - Complied in part | 0 |
| Requests to know what personal information is being collected - Total requests received - Denied | 0 |
| Requests to know what personal information is being collected - The number of days to respond substantively to a request to know in 2024 - Mean | 12 |
| Requests to know what personal information is being collected - The number of days to respond substantively to a request to know in 2024 - Median | 14 |
| Requests to know what personal information is sold or shared - Total requests received | 5 |
| Requests to know what personal information is sold or shared - Total requests received - Complied in whole | 5 |
| Requests to know what personal information is sold or shared - Total requests received - Complied in part | 0 |
| Requests to know what personal information is sold or shared - Total requests received - Denied | 0 |
| Requests to know what personal information is sold or shared - The number of days to respond substantively to a request to know what personal information is sold or shared in 2024 - Mean | 12 |
| Requests to know what personal information is sold or shared - The number of days to respond substantively to a request to know what personal information is sold or shared in 2024 - Median | 14 |
| Requests to opt out of sale or sharing - Total requests received | 820 |
| Requests to opt out of sale or sharing - Total requests received - Complied in whole | 820 |
| Requests to opt out of sale or sharing - Total requests received - Complied in part | 0 |
| Requests to opt out of sale or sharing - Total requests received - Denied | 0 |
| Requests to opt out of sale or sharing - The number of days to respond substantively to a request to know in 2024 - Mean | 14 |
| Requests to opt out of sale or sharing - The number of days to respond substantively to a request to know in 2024 - Median | 15 |
| Requests to limit the use and disclosure of sensitive personal information - Total requests received | 7 |
| Requests to limit the use and disclosure of sensitive personal information - Total requests received - Complied in whole | 7 |
| Requests to limit the use and disclosure of sensitive personal information - Total requests received - Complied in part | 0 |
| Requests to limit the use and disclosure of sensitive personal information - Total requests received - Denied | 0 |
| Requests to limit the use and disclosure of sensitive personal information - The number of days to respond substantively to a request to know in 2024 - Mean | 9 |
| Requests to limit the use and disclosure of sensitive personal information - The number of days to respond substantively to a request to know in 2024 - Median | 9 |
Sources
- California Data Broker Registry (CPPA) — registry CSV, last modified July 29, 2026, retrieved October 17, 2026
- How DROP works (privacy.ca.gov)