To dispute a data broker record, first save evidence of the listing, then decide whether you need a correction, deletion, or opt-out request. Submit it through the broker’s verified privacy channel and keep a dated record of every step.

California residents have additional rights under the CCPA and CPRA, including a statewide data-broker deletion process. Other U.S. consumers may have rights under a different state law or the broker’s own privacy policy. There is no single federal form or universal 45-day deadline for every data broker.

Which rule controls your dispute?

The right process depends on what the broker did with your information.

A general data-broker profile

Use a privacy request when a people-search site, marketing database, identity-resolution company, or similar business lists information such as:

• An old or incorrect address
• A wrong phone number or email address
• An inaccurate age, occupation, income category, or household detail
• An incorrect family or property association
• Sensitive information or inferences you want deleted or excluded from sale

You may request correction, deletion, or an opt-out, but these remedies are different. Deleting a broker’s profile usually won’t correct the public record or another company’s database.

A consumer report

Use the Fair Credit Reporting Act dispute process if the information appears in a report used to evaluate credit, employment, housing, insurance, or another eligibility decision. In that situation, dispute the specific item with the consumer reporting agency and, where appropriate, the company that supplied the information.

Keep the report, identify each disputed item, and attach relevant evidence. A general privacy opt-out may stop some data sales, but it isn’t a substitute for a consumer-report dispute.

An FTC complaint

The FTC has studied data brokers and the industry’s transparency problems, but its data broker study is not a universal correction form or a rule giving every consumer the same deadline.

Regulation V implements parts of the FCRA. It doesn’t impose one general data-removal procedure on every business that collects or sells personal information. Use FCRA rules only when your situation involves a qualifying consumer report or related activity.

Step-by-step process for disputing a data broker

1. Find the exact listing and legal entity

Search for your name together with a current or former city, phone number, or address. Compare enough details to determine whether the profile is actually yours. A similar name alone isn’t proof of a match.

Record:

• The broker’s name and the legal company listed in its privacy policy
• The profile or record URL
• The inaccurate field and the information shown
• The date and time you viewed it
• Screenshots or a saved PDF of the page
• Any confirmation number or account reference

Use the broker’s official website rather than a link from an unsolicited email or an advertisement. Some people-search brands use a separate privacy-rights portal, so check the privacy policy for the correct request channel.

2. Choose the remedy you want

Be specific about the result you’re seeking.

• Correction: Identify the wrong information and state the correct information.
• Deletion: Ask the business to delete your personal information and associated profile, subject to applicable exceptions.
• Opt-out: Ask the business to stop selling or sharing your information where the applicable law provides that right.
• Limit sensitive information: California residents may have additional choices concerning the use of sensitive personal information.

An opt-out generally doesn’t correct a false address, and a correction request doesn’t necessarily remove the profile from search results. If you want more than one remedy, list each request separately.

3. Gather evidence without oversharing

A useful dispute connects each error to a specific document or explanation. For example:

• “The profile lists 14 Oak Street. I have lived at 82 Pine Avenue since May 2023.”
• “The record associates me with a person who isn’t a household member.”
• “The listed employer is incorrect; the attached redacted employment document shows my current employer.”

A broker may ask you to verify your identity. Use its secure, official form when possible, and provide only what is reasonably necessary. Redact unrelated account numbers, financial details, and identification numbers unless the official process clearly requires them. Don’t send an unredacted driver’s license or Social Security number to an unverified email address.

Keep copies of the documents you submit and the exact version of your request.

4. Submit the request through an official channel

Look for links labeled:

• Privacy choices
• Consumer rights
• Delete my information
• Correct my information
• Do not sell or share my personal information
• People-search opt-out

A short, specific request is more useful than a general demand to “remove everything.” Include the information needed to match your profile, the exact error, your requested action, and the evidence available.

Ask the broker to:

1. Confirm receipt of the request.
2. State whether it corrected, deleted, or suppressed the information.
3. Identify any information it retained and why.
4. Explain any denial, partial response, or additional verification requirement.
5. Provide appeal instructions if an appeal is available.

5. Track the response deadline

Create a simple log with the submission date, request type, channel, confirmation number, response date, and result.

For a covered business, California privacy requests generally receive a response within 45 days. A business may be able to take one additional 45-day period when reasonably necessary, but it should notify you of the extension. The California Attorney General’s CCPA guidance explains the main consumer rights and request process.

Outside California, the deadline depends on the applicable state law and the company’s policy. Don’t assume that a 45-day timeline applies nationwide.

If the broker asks for more information, respond through the same verified channel and save the request. If it stops responding, send one concise follow-up that includes the original submission date and confirmation number.

6. Verify the result

After the broker says it acted, check the original profile using the same name, phone number, and address combination. Search while logged out or in a private browser window if the site’s results are personalized.

Look for the difference between:

• A profile that has been deleted
• Information that has been suppressed from public view
• An opt-out that stops certain sales or sharing
• Data that remains because of a legal, security, fraud-prevention, or other stated exception

If the listing reappears, save new evidence and submit another request. Brokers may receive new information from public records, commercial sources, or other databases. If the error began with a government or other official record, correcting that source may reduce the chance that the broker recreates the profile.

Data broker dispute letter template

Adapt this template to the broker’s request method. Don’t include sensitive documents unless the recipient and submission method are verified.

Subject: Request to correct, delete, or opt out of personal information

I am requesting that [broker or company name] process the following request: [correct the information / delete my personal information / opt me out of sale or sharing].

Information used to match my record:

• Name: [name]
• City and state: [city and state]
• Other identifier requested by the official privacy form: [phone, email, or profile reference]

Correction requested

• Information currently shown: [describe the error]
• Correct information: [provide the accurate information]
• Supporting evidence: [list the attached or available document]

My profile or record appears at: [profile link or reference number].

Please confirm receipt of this request and tell me what action you took. If you deny or partially deny the request, identify the reason, the information retained, any applicable exception, and the instructions for appealing the decision.

[If applicable: I am a California resident and am exercising my applicable rights under the CCPA, as amended by the CPRA.]

Please use any attached documents only to verify this request and tell me how long they will be retained.

Sincerely,
[Name]
[Date]
[Preferred contact method]

For a non-California request, remove the California sentence and refer to the privacy law or policy that applies to you.

California CCPA, CPRA, and DROP rules

California residents generally have rights to know, delete, correct inaccurate personal information, and opt out of the sale or sharing of personal information, subject to business coverage, identity verification, and legal exceptions.

The Delete Act adds a separate process for registered California data brokers. The CPPA’s data broker information describes the Delete Request and Opt-Out Platform, known as DROP. It is designed to let a California consumer submit a request that reaches registered data brokers rather than repeating the same deletion request one company at a time.

The timing still matters. The CPPA says that beginning August 1, 2026, data brokers must access the accessible deletion mechanism at least once every 45 days and process consumer deletion requests, subject to limited exceptions. Follow the CPPA’s current instructions for account creation, identity verification, and request status.

DROP is primarily a deletion and opt-out mechanism. It shouldn’t be treated as a way to edit every inaccurate field in every database. If your goal is correction, send a separate, broker-specific correction request and, when appropriate, correct the underlying source record.

The California guidance on personal information and data brokers also explains that brokers may collect sensitive information and inferences. If a broker says it retained part of your file, ask which exception or retention reason applies. The access fee described in CPPA materials concerns data brokers using the system; it isn’t a reason to pay an unverified third party that promises special access.

What to do if the broker ignores or denies you

Use this escalation order:

1. Check the response carefully. A denial may be based on failed verification, an exception, or a claim that the business doesn’t hold the information.
2. Appeal if the company offers an appeal. Restate the specific error and attach only the evidence needed.
3. Send a documented follow-up. Include the original request, dates, screenshots, and confirmation number.
4. Contact the appropriate regulator. California residents can review CPPA and California Attorney General guidance. Suspected deception or repeated unlawful conduct can also be reported to the FTC or your state attorney general.
5. Use the FCRA process when applicable. If the information affected credit, employment, housing, insurance, or another eligibility decision, dispute it with the consumer reporting agency and data furnisher instead of relying only on a privacy request.

A regulator complaint can help identify a pattern of misconduct, but it doesn’t guarantee that your individual profile will be removed immediately. It also isn’t an automatic claim for damages. The CCPA’s private right of action is limited, including in connection with certain data-security breaches, so don’t assume that a rejected deletion request alone creates a right to payment.

If your information includes a Social Security number, financial account details, or identity documents, take separate account-security steps. Data deletion can reduce exposure, but it can’t undo information that has already been copied or used.

Should you pay for a data-removal service?

A paid removal service may save time if you have many profiles to monitor. It doesn’t create additional legal rights, guarantee permanent deletion, or necessarily handle consumer-report disputes.

Before subscribing, check:

• Which specific brokers and people-search sites it covers
• Whether it handles corrections or only opt-outs and deletions
• How often it rescans and submits follow-up requests
• What evidence of completed work it provides
• Whether the subscription auto-renews
• Cancellation and refund terms
• How it stores identity-verification documents
• Whether it shares or sells information about its customers
• Whether it supports family members or additional addresses

Treat claims such as “90% removal” as marketing unless the company explains what it measured, which sites it tested, and how long the result lasted. Read the current terms and price on the provider’s own website rather than relying on an old comparison.

Mistakes that weaken a data broker dispute

• Using a vague request: Name the exact record and requested remedy.
• Confusing opt-out with deletion: An opt-out may limit sale or sharing without removing the profile.
• Sending documents to a suspicious address: Verify the domain and privacy policy first.
• Submitting excessive personal information: Redact unrelated details and avoid creating a new privacy risk.
• Ignoring the source record: Correct the underlying public or commercial source when it is wrong.
• Using a privacy request for a consumer report: Follow the FCRA dispute process for credit, employment, housing, insurance, or similar reports.
• Failing to verify later: Check the listing again and keep evidence if it returns.
• Assuming a paid service is permanent: New data can recreate a profile after removal.

Frequently asked questions

Is there one federal data broker removal form?

No. The United States doesn’t have one universal form or deadline for all data brokers. California’s DROP is a statewide process for registered California data brokers, not a nationwide system.

How long does a data broker have to respond?

For a covered California business, a privacy request generally receives a response within 45 days, with a possible additional 45-day extension when allowed and properly communicated. Other state laws and company policies may use different timelines.

Can I force a broker to correct inaccurate information?

California residents may have a right to correct inaccurate personal information held by a covered business, subject to the law’s requirements and exceptions. Elsewhere, the answer depends on state law and the broker’s policy. If the information appears in a qualifying consumer report, use the FCRA dispute process.

Will deleting my broker profile stop identity theft?

No. Removal can reduce exposure but cannot erase copies already obtained or repair compromised accounts. If highly sensitive information is exposed, secure affected accounts and consider the appropriate identity-theft and credit-protection steps in addition to requesting deletion.