Is LexisNexis Risk Solutions FL Inc. covered by California DROP?
Yes — in DROP scope. LexisNexis Risk Solutions FL Inc. is listed on the 2026 California Data Broker Registry. Registered data brokers must process deletion requests submitted through DROP, starting August 1, 2026.
Unverified: we have not confirmed this broker in DROP's own in-app broker list (that list is only visible inside DROP). Registry data last modified July 29, 2026.
Possible partial exemptions. This broker told the registry that it, or a subsidiary, is regulated by: GLBA, IIPPA, CMIA, HIPAA. Information covered by those laws may be exempt from deletion, so a DROP request may result in a partial deletion or an “Exempted” status (see privacy.ca.gov). This is our reading of the broker's own answers, not a legal determination.
Registration information
| Registered name | LexisNexis Risk Solutions FL Inc. |
|---|---|
| Doing business as | — |
| Website | https://risk.lexisnexis.com |
| Privacy rights / deletion page | https://risk.lexisnexis.com/state-privacy-act-notice https://consumer.risk.lexisnexis.com/request#california |
| Contact email (as registered) | consumer.documents@lexisnexisrisk.com |
| Phone (as registered) | 888-217-1591 |
| Address (as registered) | 1000 Alderman Drive, Alpharetta, GA, 30005, UNITED STATES |
| Registry years found |
Earlier years are matched to previous CPPA/DOJ registry files by name or website and may miss renamed companies. |
Data categories it reports collecting
The registry asks every broker Yes/No questions about these specific categories. It does not list everything a broker collects.
| Personal information of minors | Yes |
|---|---|
| Account logins / account numbers with security codes | No |
| Government-issued ID numbers | Yes |
| Citizenship / immigration status | No |
| Union membership status | No |
| Sexual orientation | No |
| Gender identity / expression | No |
| Biometric data | No |
| Precise geolocation | Yes |
| Reproductive health care data | No |
Who it says it sold or shared data with (past year)
| A foreign actor | No |
|---|---|
| The federal government | Yes |
| Other state governments | Yes |
| Law enforcement (except when required by subpoena or court order) | Yes |
| A developer of a generative AI system or model | No |
Regulation under other privacy laws
| Fair Credit Reporting Act (FCRA) | No |
|---|---|
| Gramm-Leach-Bliley Act (GLBA) | Yes |
| California Insurance Information and Privacy Protection Act (IIPPA) | Yes |
| California Confidentiality of Medical Information Act (CMIA) | Yes |
| HIPAA (HIPAA) | YesIf the data broker or its subsidiaries are regulated by HIPAA, describe the types of personal information coveredN/A If the data broker or its subsidiaries are regulated by HIPAA, describe the specific products or services coveredFraud prevention, identify verification, and other risk management services. If the data broker or its subsidiaries are regulated by HIPAA, describe the percentage of data activities covered0% |
Consumer request metrics it reported
Shown exactly as reported. Column labels are the CPPA's; they reference 2024 even though the CPPA page describes this registry as covering 2025 activity.
| Requests to delete - Total requests received | 12769 |
|---|---|
| Requests to delete - Total requests received - Complied in whole | 12692 |
| Requests to delete - Total requests received - Complied in part | 0 |
| Requests to delete - Total requests received - Denied | 77 |
| Requests to delete - The number of days to respond substantively to a request to delete in 2024 - Mean | 1 |
| Requests to delete - The number of days to respond substantively to a request to delete in 2024 - Median | 1 |
| Requests to know what personal information is being collected - Total requests received | 60645 |
| Requests to know what personal information is being collected - Total requests received - Complied in whole | 60645 |
| Requests to know what personal information is being collected - Total requests received - Complied in part | 0 |
| Requests to know what personal information is being collected - Total requests received - Denied | 0 |
| Requests to know what personal information is being collected - The number of days to respond substantively to a request to know in 2024 - Mean | 3 |
| Requests to know what personal information is being collected - The number of days to respond substantively to a request to know in 2024 - Median | 1 |
| Requests to know what personal information is sold or shared - Total requests received | 60645 |
| Requests to know what personal information is sold or shared - Total requests received - Complied in whole | 60645 |
| Requests to know what personal information is sold or shared - Total requests received - Complied in part | 0 |
| Requests to know what personal information is sold or shared - Total requests received - Denied | 0 |
| Requests to know what personal information is sold or shared - The number of days to respond substantively to a request to know what personal information is sold or shared in 2024 - Mean | 3 |
| Requests to know what personal information is sold or shared - The number of days to respond substantively to a request to know what personal information is sold or shared in 2024 - Median | 1 |
| Requests to opt out of sale or sharing - Total requests received | 33167 |
| Requests to opt out of sale or sharing - Total requests received - Complied in whole | 33001 |
| Requests to opt out of sale or sharing - Total requests received - Complied in part | 0 |
| Requests to opt out of sale or sharing - Total requests received - Denied | 166 |
| Requests to opt out of sale or sharing - The number of days to respond substantively to a request to know in 2024 - Mean | 1 |
| Requests to opt out of sale or sharing - The number of days to respond substantively to a request to know in 2024 - Median | 1 |
| Requests to limit the use and disclosure of sensitive personal information - Total requests received | 13260 |
| Requests to limit the use and disclosure of sensitive personal information - Total requests received - Complied in whole | 13190 |
| Requests to limit the use and disclosure of sensitive personal information - Total requests received - Complied in part | 0 |
| Requests to limit the use and disclosure of sensitive personal information - Total requests received - Denied | 70 |
| Requests to limit the use and disclosure of sensitive personal information - The number of days to respond substantively to a request to know in 2024 - Mean | 1 |
| Requests to limit the use and disclosure of sensitive personal information - The number of days to respond substantively to a request to know in 2024 - Median | 1 |
Additional comments from the broker
The business responded to consumer requests consistent with the CCPA, which does not apply to certain information we maintain, including information subject to the Gramm-Leach-Bliley Act (GLBA) and the Driver’s Privacy Protection Act (DPPA), protected health information received by a business associate subject to the Health Insurance Portability and Accountability Act (HIPAA), and information subject to the California analogues of these laws, and where the CCPA’s application is preempted by, or in conflict with, federal law or the United States or California Constitution. Requests were denied because (i) we were unable to confirm the consumer’s identity, (ii) we were unable to connect the information submitted in the request with personal information in our possession, or (iii) the consumer provided inaccurate or incomplete information. The business actively works to exclude from its products and does not specifically seek personal information relating to consumers with a date of birth indicating that the consumer is a minor, except in connection with services where it provides personal information to insurance carriers regarding licensed drivers who are minors, including those who may need to be added to household automobile insurance policies. The business does not sell precise geolocation information. The business implements a robust credentialing process that requires that purchasers are legitimate business, government, non-profit, or educational institutions. The business’ affiliates, LexisNexis Risk Solutions Inc., SageStream, LLC, and Accuity Asset Verification Services Inc., are consumer reporting agencies as defined under the FCRA.
Sources
- California Data Broker Registry (CPPA) — registry CSV, last modified July 29, 2026, retrieved October 17, 2026
- How DROP works (privacy.ca.gov)