Start with the data broker's current official privacy or consumer-preference channel. If the broker offers a portal, use it. If it doesn't, email can create a useful record, but an email alone doesn't create a deletion right or guarantee a response. An outdated address may not count as a properly submitted request.

Your options depend on your state or country of residence, the broker's role, and how it uses the data. Deletion, a sale opt-out, marketing suppression, access, correction, and a regulator complaint are separate requests.

Choose the request that matches your goal

Goal What to ask for Important limit
Delete data Delete personal information where the law permits Legal, security, fraud-prevention, or other exceptions may apply
Stop sale or sharing Opt out of the sale or sharing of personal information This may not remove data already sent to other companies
Stop marketing Suppress your details from direct-marketing lists An unsubscribe may not delete a broker profile
Access data Identify the information, sources, uses, and recipients Verification may be required
Correct data Correct inaccurate information or inferences The available correction right varies by state
File a complaint Report ignored requests, deceptive notices, or misuse A regulator may investigate without obtaining a personal remedy

Don't cite every privacy law in the same message. State where you live and mention only the law that plausibly applies.

Which rules control a data-broker request?

California privacy requests

California's CCPA and CPRA can provide rights that include deletion and opting out of the sale or sharing of personal information, subject to exceptions. For a direct request to a business, the usual response period is 45 days, although an allowed extension may apply in some circumstances.

The Delete Act creates a separate process for registered data brokers through California's DROP platform. A direct request to one company and a DROP request are not the same process. Read the CPPA's data broker information before sending a request.

Other U.S. states

State privacy laws differ. Some provide deletion and sale opt-out rights, while others cover only certain consumers, businesses, or types of data. Use your state of residence in the request and check the broker's privacy notice for its request process and eligibility rules.

There is no general federal law that gives every U.S. consumer a guaranteed right to erase every marketing profile.

FTC and FCRA limits

The FTC can receive complaints about unfair or deceptive business practices, but the FTC Act is not a general data-deletion request law. An FTC complaint doesn't replace contacting the broker.

The Fair Credit Reporting Act, or FCRA, matters when information is used in a consumer report for a decision such as credit, employment, housing, or insurance. It doesn't automatically turn every marketing database into a credit report. If an inaccurate report affected you, dispute it with the reporting company and identify the specific decision involved.

GDPR requests

The GDPR is not a general U.S. opt-out law. Use a GDPR template only when you are within its territorial scope or the company's processing falls within that law.

A valid GDPR erasure or objection request usually receives a response within one month. A controller may be able to extend the period for a complex request, but it generally must explain the extension within the first month. Erasure also has exceptions.

California DROP: what changes the process

California's official DROP platform is designed to let eligible California residents submit a deletion request to registered data brokers covered by the platform. It isn't a general deletion system for every business, public record, or downstream copy.

Before submitting, DROP requires you to verify that you are a California resident. If the verification providers cannot confirm your residency, the platform says you may request a review of that classification under its stated process.

The official How DROP works guidance says:

The 45-day figure describes how often brokers must access the mechanism. It isn't a promise that every request will be completed within 45 days. The 90-day status period is also different from the usual response period for a direct CCPA request.

Use DROP for covered broker requests, save your DROP ID, and check the platform for status. A direct email is still useful for a broker-specific listing, an access or correction request, a request outside the registry, or a problem the platform doesn't address.

Prepare before sending an email

  1. Find the current official channel. Start with the broker's privacy policy or consumer-preference page. Old guides and blog posts may list addresses that no longer work.
  2. State your location. Include your state or country of residence so the company can identify the relevant process.
  3. Provide matching details, not excessive details. Use your name, email address, phone number, current address, and a former address only when needed to locate the record.
  4. Don't email sensitive documents automatically. Ask what verification is required. Use the broker's secure upload process, and redact account numbers or other information that isn't needed.
  5. Keep an evidence log. Save the sent message, delivery information, screenshots, ticket numbers, verification requests, and replies.

Replace every bracketed item before sending. Remove legal references that don't apply.

Seven practical data-broker email templates

1. General deletion and sale opt-out request

Use this when you know the broker has your information but you're not relying on one specific state law.

Subject: Privacy request for [full name] - deletion and sale opt-out

Hello [broker privacy team],

I live in [state or country]. I am asking [broker] to process the following requests under the privacy law that applies to me:

1. Delete the personal information you maintain about me, to the extent the law permits.
2. Opt me out of the sale or sharing of my personal information and targeted advertising, where those rights apply.
3. Suppress my information from direct-marketing lists and future profile-building where available.
4. Tell me what information remains and the reason for any denial or legal exception.

Please tell me what verification you require and provide a secure method if identity documents are necessary. I will not send an unredacted government ID or Social Security number by ordinary email.

Matching details:
Name: [full name]
Email: [email address]
Phone: [phone number]
Current address: [address]
Former address, if needed: [former address]

Please confirm receipt, provide a tracking number, and state the expected response date.

Sincerely,

[full name]
[preferred contact information]

2. Access and correction request

Use this first if you don't know what the broker has or you need to document an inaccurate profile.

Subject: Privacy access and correction request - [full name]

Hello [broker privacy team],

I live in [state or country] and request access to the personal information you maintain about me, to the extent provided by the law that applies.

Please provide, where available:

- The categories and specific pieces of personal information held about me
- The sources of that information
- The purposes for collecting, using, or sharing it
- The categories of recipients or customers that received it
- Profiles, inferences, or marketing segments associated with me

I also request correction of the following inaccurate information:

Incorrect information: [describe it]
Correct information: [provide the correction]
Evidence available: [describe attached or available evidence]

Please tell me what verification is required and use a secure method for any identity documents. If you deny any part of this request, explain the reason and tell me whether an appeal process is available.

Matching details:
Name: [full name]
Email: [email address]
Phone: [phone number]
Address used to match the record: [address]

Sincerely,

[full name]

3. California CCPA and CPRA request

Use this for a direct request to a company when you are a California resident. You can separately submit a request through DROP for covered registered data brokers.

Subject: California privacy request - deletion and sale opt-out

Hello [broker privacy team],

I am a California resident. Under the California Consumer Privacy Act and California Privacy Rights Act, I request:

1. Deletion of the personal information you maintain about me, subject to applicable exceptions.
2. Opt-out of the sale or sharing of my personal information.
3. Opt-out of targeted advertising or similar uses where applicable.
4. Suppression from direct-marketing lists and future data appends where available.

This is a privacy request, not only a marketing unsubscribe. Please search for my records using the details below:

Name: [full name]
Email: [email address]
Phone: [phone number]
Current address: [address]
Former address, if needed: [former address]

Please confirm receipt and tell me what verification is required. If you deny any part of the request, identify the relevant exception and explain how I can appeal, if an appeal process is available.

Sincerely,

[full name]

4. GDPR erasure and objection request

Use this only when the GDPR applies to your situation.

Subject: GDPR Article 17 erasure and Article 21 objection - [full name]

Hello [controller or data protection officer],

I am located in [country], and I believe the GDPR applies to this processing.

I request erasure of my personal data under Article 17. I also object under Article 21 to processing for direct marketing and related profiling.

Please:

- Stop processing my information for direct marketing and profiling
- Delete my personal data where no legal exception applies
- Identify the controller responsible for this processing
- Tell me the source, purpose, lawful basis, and recipients of my information
- Notify relevant recipients of the erasure request where required

Please confirm the outcome within one month. If you believe an extension is legally permitted, notify me within that month and explain the reason and expected date.

Please provide a secure identity-verification method if needed. If you refuse the request, explain the legal basis for the refusal and provide information about the applicable supervisory authority complaint process.

Name: [full name]
Email: [email address]
Country of residence: [country]
Matching information: [minimum necessary details]

Sincerely,

[full name]

5. Acxiom or Epsilon record-specific request

Acxiom and Epsilon may use different consumer-preference systems for different services. Identify the exact listing, campaign, or service instead of asking vaguely for removal from a large database.

For Epsilon, start with its consumer information and preference page. For Acxiom, use the current privacy or opt-out page on the official Acxiom domain. Don't rely on an email address copied from an old guide.

Subject: Privacy request about [service, listing, or campaign] - [full name]

Hello [Acxiom or Epsilon privacy team],

I found my personal information associated with [name of service, listing, campaign, or brand] on [date]. The information appeared as follows:

[Brief description of the information]

Please search for my record using:

Name: [full name]
Email: [email address]
Phone: [phone number]
Address: [address]

Please delete the information that may be deleted under the law that applies to me. Also opt me out of the sale or sharing of my information and suppress it from future marketing uses where available.

If a separate consumer preference center or verification process is required, send me the official link or instructions. Please confirm whether the record is maintained by [Acxiom or Epsilon], an affiliate, or another entity, and identify any reason part of my request cannot be completed.

Sincerely,

[full name]

6. Follow-up after an unanswered request

Send this as a reply to the original message so the history remains attached.

Subject: Follow-up to privacy request sent [date] - [tracking number]

Hello [broker privacy team],

I submitted a privacy request on [date] through [email address, portal, or form]. The request asked for:

[Briefly list deletion, sale opt-out, access, or correction]

Reference number: [ticket or reference number]

I have not received a substantive response. Please confirm the current status, any verification still required, and the expected completion date. If you are denying or extending any part of the request, explain the reason and identify any available appeal process.

Please treat this as a follow-up to the original request, not a replacement for it.

Sincerely,

[full name]
[matching contact details]

7. Complaint to a regulator

This text is for an official complaint form or official complaint channel. It isn't a substitute for the request to the broker.

Subject: Complaint about [broker] and unresolved privacy request

I am reporting [broker] regarding its handling of my personal information.

Broker: [legal or trading name]
Website or service: [official website or service]
My state or country: [location]

I contacted the company on [date] through [method] and requested:

[Describe the deletion, opt-out, access, or correction request]

The company responded as follows, or did not respond:

[Summarize the response]

The issue is:

[Explain the continued sale, inaccurate information, misleading privacy notice, refusal to process the request, or other conduct]

Evidence available:
- Copy of the original request
- Delivery confirmation or ticket number
- Company response
- Screenshot showing the listing or privacy statement
- Relevant dates and follow-up messages

I am asking your office to review whether the company followed the privacy obligations or representations that apply. Please tell me if additional information is needed. I have removed unnecessary sensitive information from the attached documents.

Name: [full name]
Contact information: [email and phone]

For California data-broker issues, review the CPPA data broker resources. For alleged deceptive practices, use the FTC's current official complaint process. A state attorney general may also have a privacy complaint route.

Email, portal, or complaint form?

Method Best use Limitation
Official privacy portal Identity verification and standard deletion requests The portal may cover only certain services or jurisdictions
Email A written record, broker-specific issue, or follow-up Messages may be routed incorrectly or filtered
California DROP One request for covered registered California data brokers It is limited to eligible California residents and has its own status timeline
Regulator complaint form Reporting possible violations or deceptive conduct The agency may not obtain individual deletion
Postal letter Extra documentation when a company requires it It can be slower and harder to track

Use the company's official process when one exists. An email sent to an outdated address may not count as a properly submitted request.

What to do after sending

Common mistakes to avoid

Citing every privacy law

A long list of CCPA, GDPR, FTC, FCRA, and state statutes can make a request less clear. State your location and use the rule that actually applies.

Treating an unsubscribe as deletion

An unsubscribe may stop emails without removing the underlying profile. Ask separately for deletion, a sale or sharing opt-out, and marketing suppression.

Sending too much identity information

A broker may need enough data to match your record, but ordinary email usually isn't the right place for a full driver's license, Social Security number, or complete date of birth. Ask for secure verification first.

Promising proof the broker can't provide

Request written confirmation and an explanation of any remaining data. Don't demand a particular database log or claim that a company must provide evidence in a specific format unless the applicable law requires it.

Assuming one request removes everything

Data may have been copied, sold, or collected again from another source. Keep monitoring and submit separate requests when another company holds the information.

Frequently asked questions

Does a data broker have to delete my information?

Sometimes, depending on your location, the broker's activities, and applicable exceptions. There is no single U.S. rule requiring every broker to delete every record for every person.

Is a 45-day deadline universal?

No. California's direct request rules and DROP's broker access cycle are different. Other state laws and company policies may use different timelines. Don't insert a 45-day deadline unless it applies to your request.

Will California DROP remove my data from every company?

DROP is intended to reach the registered California data brokers covered by the platform. It doesn't erase public records, every downstream copy, or profiles held by companies outside the mechanism.

Should I email Acxiom or Epsilon directly?

Use the current official privacy or consumer-preference channel first. Epsilon provides consumer information and preference resources on its official site. For Acxiom, verify the current official process on its own domain rather than relying on an old email address.

Can an FTC complaint delete my profile?

Not directly. An FTC complaint reports possible unfair or deceptive conduct. Send the deletion or opt-out request to the broker separately and keep proof of both actions.

This is general consumer information, not legal advice. Rights, exceptions, and deadlines depend on your residence, the data use, and the company handling the record.

To begin, open the broker's official privacy page, choose the request type that fits your goal, replace the bracketed details, and save the confirmation.