If a data broker has your information, start with a direct, verified deletion or opt-out request. California residents can also use the official Delete Request and Opt-Out Platform, or DROP. If the broker ignores the request, document what happened before reporting it to the Federal Trade Commission or your state attorney general.

A complaint may prompt regulatory review, but it doesn't automatically delete your information or guarantee an individual response.

A deletion request, an opt-out, and a complaint are different

Many data brokers collect information from public records, commercial sources, online activity, and other companies. That collection isn't automatically illegal, and the same deadline doesn't apply to every broker or every U.S. resident. Your strongest complaint shows a specific failure, such as a broken opt-out process, a misleading privacy statement, continued sale or sharing after a confirmed opt-out, or a refusal to honor a request covered by applicable law.

If the information was used to make a credit, employment, housing, or insurance eligibility decision, describe that separately. A marketing-data opt-out may not be the correct dispute process for that situation.

Prepare before contacting a data broker

1. Confirm the company

People-search websites, marketing databases, and identity-resolution companies can use similar names. Save:

• The broker's legal name and any brand name
• Its privacy policy and opt-out page
• The profile page or search result showing your information
• The email address, web form, or mailing address used for the request

A parent company may operate several websites, so check whether its privacy policy directs requests to one central privacy team.

2. Gather matching identifiers

Use only information needed for the broker to find the correct record. Depending on the broker, that may include:

• Current and previous names
• Current or former city and state
• Email addresses
• Phone numbers
• Date of birth, if the official verification process requests it

Don't send your Social Security number, account password, or an unredacted government ID through an ordinary email. If identity verification is required, use the broker's secure portal and provide the minimum information necessary.

3. Create an evidence log

Record the date and time of each request, the method used, the identifiers provided, confirmation numbers, and the response deadline that applies. Keep screenshots and copies of emails, but redact unnecessary sensitive information before attaching them to a complaint.

Send a precise deletion or opt-out request

Use the broker's own privacy-rights form when it offers one. A clear request is easier to match than a general message saying, “Please remove me.”

Use this template for a U.S. request and adjust the legal reference to your state and eligibility:

Subject: Privacy request to delete my personal information

Hello [Broker privacy team],

I request deletion of personal information associated with me under [applicable state privacy law, if applicable]. I also opt out of the sale or sharing of my personal information where that right applies.

Identifiers for matching:
- Full name and name variations: [name]
- Email address or addresses: [email]
- Phone number or numbers: [phone]
- City and state: [location]
- Date of birth: [only if requested through a secure verification process]

Please confirm receipt, tell me if additional verification is required, and explain the result of this request. If any information must be retained under an applicable exception, please identify the categories retained and whether you can still honor my opt-out request.

Thank you,
[Name]
[Preferred contact information]

If you're a California resident and are using the CCPA deletion right, you can refer to California Civil Code section 1798.105. Don't cite California law if you aren't eligible for it. Likewise, don't assume that a privacy law in one state creates the same right in another.

A Global Privacy Control signal can communicate an opt-out of the sale or sharing of personal information under California guidance. It isn't the same as a deletion request. After enabling it, check whether the site recognizes the signal and save evidence of the result.

Understand the California deadlines

For a direct California Consumer Privacy Act request, check the current California Attorney General's CCPA guidance. Many direct requests use an initial 45-day response period, with an extension where permitted.

DROP has a different operational rule. The official platform states that data brokers must process deletion requests at least once every 45 days beginning August 1, 2026. That is a processing cadence, not a promise that every result will arrive exactly 45 days after submission.

There is no universal 45-day deadline for every U.S. data broker. Use the deadline in the applicable state law, the broker's privacy notice, or the platform handling your request.

How California residents can use DROP

DROP is a California mechanism, not a nationwide opt-out for every company that holds personal information.

1. Open the official DROP portal.
2. Complete the required residency verification. The platform says the verification is based on the California resident definition in section 17014 of Title 18 of the California Code of Regulations, as that section read on September 1, 2017.
3. Submit the deletion request and provide the identifiers needed for matching.
4. Save the submission confirmation and date.
5. Check the results and keep records of brokers that report a deletion, a missing record, an incomplete match, or another outcome.
6. Contact companies outside DROP's scope directly.

If the verification service can't confirm your California residency, the platform says you may request a review of your residency classification under section 7622 of Title 11 of the California Code of Regulations. Use the instructions in the portal rather than sending residency documents to an unverified third party.

Because DROP's broker-processing requirement begins August 1, 2026, read the platform's current terms and status information before assuming that a submission has already been processed. Continue using a direct opt-out or a Global Privacy Control signal when your goal is to stop sale or sharing and the relevant company isn't covered by your DROP request.

When to file an FTC complaint

Report a broker to the FTC when the facts suggest unfair or deceptive conduct, a misleading privacy promise, an inaccessible opt-out process, or a failure that may affect many consumers. A refusal alone doesn't prove that a law was violated, so describe the facts without exaggerating the legal conclusion.

Use the FTC's Report Fraud website and provide:

• The broker's legal and trade names
• The exact website or profile page involved
• The date and method of your deletion or opt-out request
• The response, refusal, or lack of response
• Screenshots, confirmation numbers, and relevant correspondence
• The result you want, such as an investigation into the broker's privacy practices

The FTC's complaint system is an enforcement and information-gathering channel. It isn't a guaranteed way to obtain personal deletion, and the FTC generally doesn't act as a private customer-service representative for an individual request. Use the FTC contact page for general routing questions rather than adding sensitive information to a complaint that doesn't require it.

When to contact a state attorney general

A state attorney general's consumer-protection or privacy complaint process may be appropriate when:

• The broker is subject to your state's privacy law
• The company misrepresented how to exercise a privacy right
• The opt-out or deletion form was broken or deliberately obstructive
• The company continued a covered sale or sharing activity after confirming your opt-out
• The broker exposed sensitive information or refused to correct a serious error

Find the complaint form on the official website of your state's attorney general. California consumers can start with the state's CCPA guidance to review available rights and procedures.

Attach your evidence log and keep the submission confirmation. An agency may investigate a pattern without obtaining a specific remedy for you, so continue preserving evidence and follow the broker's process when safe.

California's Attorney General guidance says that a consumer who intends to sue over a CCPA violation must provide written notice identifying the sections allegedly violated and allow 30 days for a written cure response. That requirement concerns a possible lawsuit, not a routine deletion request or an FTC report. Consider legal advice before relying on it.

Follow up without weakening your record

Send one concise follow-up after the applicable response period or after a promised completion date. Include the original ticket number and repeat the exact request.

Ask the broker to clarify:

• Whether it located a record matching your identifiers
• Whether it deleted the record or only stopped certain uses
• Which information it retained and why
• Whether it shared the request with service providers or related databases
• What verification, if any, is still outstanding

If the broker says it found no record, try the name, address, email, or phone number that appeared on the profile. Don't keep sending more sensitive information merely to force a match.

If the broker confirms deletion, save the confirmation and check the listing again later. Deletion from one broker doesn't remove information held by another broker, a public agency, or a separate source. Information can also reappear when a broker receives a new record from an unrelated source.

Manual requests versus removal services

Manual opt-outs cost nothing and give you direct control over the information submitted. They take more time, especially when each company has a different form or verification method.

A paid removal service can save time, but check its:

• Covered broker list and geographic scope
• One-time price and recurring subscription terms
• Cancellation procedure
• Privacy policy and data-retention practices
• Proof it provides after submitting a request
• Monitoring policy when information reappears

A removal service isn't a regulator and can't override a broker's identity verification. California residents can use DROP directly without paying a third party. Whatever method you choose, keep your own request dates and confirmations.

Common mistakes to avoid

• Treating an FTC complaint as a deletion request
• Using a California legal citation without being a California resident
• Assuming every broker follows a 45-day deadline
• Sending a Social Security number or full identity document by ordinary email
• Failing to include the email, phone number, or location connected to the record
• Submitting repeated requests without saving the original confirmation
• Accepting “removed from search” as proof that all processing has stopped
• Paying for a service without checking its recurring billing and cancellation terms
• Calling a broker's conduct illegal without explaining the specific evidence

The most effective approach is layered: submit the correct request, preserve proof, wait for the applicable deadline, verify the result, and escalate with a factual record if the broker doesn't comply.