The most practical way to reduce your exposure to data brokers is to submit opt-out or deletion requests directly, keep proof of each request, and check again later. One request usually affects only the company that receives it. It may not remove public records, another broker’s copy, or information shown in a relative’s or associate’s report.

The Federal Trade Commission’s guidance on people-search sites says that someone may use one detail, such as your name or phone number, to buy a report containing much more information about you. The steps below are for U.S. consumers and are practical privacy guidance, not legal advice.

What controls a data broker opt-out?

The answer depends on the company, your state, the type of information, and the relationship between you and the business.

• The broker’s own process: Most people-search websites provide an opt-out link or instructions for removing a profile. Outside a centralized state process, you may need to contact sites separately.
• California’s Delete Act: California has a centralized deletion system for covered data brokers called the Delete Request and Opt-Out Platform, or DROP.
• Global Privacy Control: GPC is a browser signal that communicates a request to limit the sale or sharing of personal information. It is not the same as a request to erase records.
• Public records and direct relationships: An opt-out from a broker does not automatically remove information from government records, news reports, a company you deal with directly, or another website.

Don’t assume that an opt-out from a marketing email deletes a people-search profile. Marketing preferences and personal-information deletion requests are separate actions.

California DROP: What residents should know

California residents should check the California Privacy Protection Agency’s data broker information for current DROP instructions and eligibility details.

The CPPA says that, beginning August 1, 2026, data brokers must access the accessible deletion mechanism at least once every 45 days and process consumer deletion requests, subject to limited exceptions. The platform applies to covered data brokers, not automatically to every business that stores information about a California resident.

The CPPA also says data brokers must pay an access fee beginning August 1 to access DROP and download consumer deletion lists. That is a broker-side requirement; a payment request from an unrelated website should not be treated as an official California fee without checking the CPPA site.

Qualifying brokers also have reporting obligations. The CPPA says they must report certain request totals and outcomes in their privacy policy by July 1 following the first year in which they meet the definition of a data broker. Those figures may help you assess transparency, but they don't prove that your individual profile was removed.

How to opt out of people-search websites

1. Make a list before submitting requests

Search for yourself using combinations of:

• Your full name and common name variations
• Current and former phone numbers
• Personal email addresses
• Current and previous cities or addresses
• Usernames that may be connected to your identity

Record each site that displays a profile. Save the profile link and take a screenshot showing the information before you submit a request. This gives you a record of what you asked the company to remove.

Use the company’s actual website or an official state resource when possible. Be cautious with lookalike opt-out pages that ask for unnecessary personal information or payment.

2. Find the company’s removal instructions

Look for links labeled:

• “Opt out”
• “Remove my information”
• “Do not sell or share”
• “Privacy choices”
• “Privacy rights”
• “Submit a deletion request”

If you can't find an opt-out link, the FTC recommends searching for the site’s name together with terms such as “opt out” or “remove my information.” Follow the site’s instructions carefully because some companies require an email confirmation or another form of identity verification.

3. Choose deletion when it is available

A site may offer several choices, including suppressing a profile, opting out of sale or sharing, or requesting deletion. Read the wording before selecting an option.

• Deletion asks the company to remove personal information it is allowed to delete.
• Suppression or opt-out may stop a profile from appearing publicly or limit certain uses without eliminating the underlying record.
• Sale or sharing opt-out addresses specific data uses and does not necessarily erase historical information.

Provide only the information reasonably required to locate your record. If a site requests an identity document, review its instructions to see whether unrelated details can be redacted and how the document will be handled. Don't upload a full Social Security number or other highly sensitive information merely because a form requests it without explaining why it is needed.

4. Save confirmation details

Keep:

• The date and time of the request
• The profile URL
• The email address or phone number used
• A confirmation email or request number
• Screenshots of the submitted form
• Any response explaining a denial or exception

A confirmation message shows that you made a request. It doesn't necessarily mean that every copy of the information has been deleted.

5. Check the site again

Return after the company’s stated processing period. If the profile is still visible, use the original confirmation or ticket number in a follow-up request.

The FTC warns that information may still appear in reports about relatives, neighbors, or associates. Removing one listing therefore isn't the same as removing every reference to you. New information may also be collected later, so periodic checks are useful.

Use Global Privacy Control as an additional signal

The Global Privacy Control website describes GPC as a way for a user to communicate a preference to limit the sale or sharing of personal data. You can enable it through a supported browser or privacy extension.

GPC can be useful for future transactions with businesses that recognize the signal, but it has clear limits:

• It doesn't contact every data broker for you.
• It doesn't erase information already held by a broker.
• It doesn't remove public records.
• It doesn't guarantee that another company won't publish a separate profile.
• It may not apply in the same way in every state or to every business.

Use GPC together with direct deletion requests rather than treating it as a replacement for them.

Why an opt-out may not remove everything

A data broker may explain that it cannot remove certain information or that an exception applies. The CPPA specifically notes that California deletion requests are subject to limited exceptions.

Other common limits include:

• The information came from a public record.
• Another company supplied or republished the same information.
• Your name appears in someone else’s profile.
• The site has not yet completed its processing period.
• The request did not pass the site’s identity-verification process.
• The company’s service is outside the scope of the privacy mechanism you used.

Read the company’s response instead of submitting the same request repeatedly with more sensitive information. If the response is unclear, ask what information remains, what request was processed, and whether the company is denying deletion or simply delaying it.

People dealing with stalking or domestic violence should treat every identity-verification request as a safety decision. Avoid disclosing a current location unless it is necessary, and look for a safer contact or documentation method when the site provides one.

Should you pay for a data-removal service?

A paid removal service may save time, but it doesn't have broader authority than the consumer. Before paying, check:

• Which websites and data brokers it covers
• Whether it submits manual requests, automated requests, or both
• How often it checks for reappearing profiles
• Whether it handles California DROP requests
• What personal information the service stores
• How it protects account credentials and identity documents
• Whether the subscription renews automatically
• How cancellation and refunds work
• Whether it gives you copies of requests and confirmations

A service that monitors only a short list of people-search sites may not address the brokers that matter most to you. Compare its coverage with the sites you found during your own search, and don't assume that paying once creates permanent protection.

What to do if a broker ignores your request

1. Review the instructions again. Check whether you missed an email-confirmation step or submitted the request through the wrong form.
2. Follow up using the original confirmation. Include the request date, profile link, and ticket number.
3. Ask for a specific explanation. Find out whether the company denied deletion, applied an exception, or has not finished processing.
4. Preserve the evidence. Keep screenshots, emails, and copies of the information that remained online.
5. Escalate through an official channel. California residents can return to the CPPA’s current data broker instructions. Consumers elsewhere should check the official privacy or attorney general website for their state rather than relying on an unofficial complaint service.

Start with the sites that expose your address, phone number, or family connections. Submit those requests first, save every confirmation, and then work through the remaining listings one by one.