Quick answer: There is no single U.S. request that removes your information from every data broker. A practical sequence is to identify how the information is being used, enable Global Privacy Control (GPC), use any state privacy rights available to you, submit requests to the individual companies, and keep a record of each request. Removal usually means suppression from one service. It doesn't erase a government record, another broker's copy, or information collected later.
Scope: These steps are for U.S. consumers. State privacy laws, California rules, and federal consumer-reporting rules can apply differently. This is general consumer information, not legal advice.
What is a data broker?
A data broker collects, combines, analyzes, and sells or shares information about people. It often has no direct service relationship with the person whose information it holds.
A broker may collect:
- Names, phone numbers, email addresses, and current or previous addresses
- Public-record information, such as property records or court filings
- Purchase, loyalty-program, and commercial transaction data
- Website, app, advertising, and location-related information
- Household, demographic, interest, or financial categories
- Inferences, such as an estimated income tier or likely interests
Some information is verified. Other details are inferred from behavior or linked records. An estimated characteristic can be wrong even when it appears in a polished report.
A broker might sell raw records, provide searchable reports, or offer audience segments through a subscription or application programming interface. Companies can also buy information from one another. That is why the same address or phone number may appear in several databases.
Data brokers, people-search sites, and credit bureaus
These categories overlap, but they are not identical:
| Type of business | Typical product | Main consumer concern |
|---|---|---|
| Marketing data broker | Advertising audiences, analytics, or customer segments | Information may be used for targeting or shared with partners |
| People-search site | Searchable reports about names, addresses, relatives, and associates | Strangers may obtain information that makes it easier to contact or locate someone |
| Consumer reporting agency | Reports used for credit, employment, housing, insurance, or other regulated purposes | Accuracy, permissible purpose, and dispute procedures may be controlled by the Fair Credit Reporting Act |
| Public-record provider | Access to records obtained from government or other sources | Removing a broker's copy may not change the original record |
A company can operate in more than one category. Its label doesn't determine which law applies. The use of the information and the company's role matter.
Why data broker profiles create risks
A single phone number or name can sometimes lead to a report containing an address, relatives, or other identifying details. The Federal Trade Commission's guidance on people-search sites warns that information may continue to appear in reports about relatives, neighbors, or associates even after you act on your own profile.
The main risks include:
- Stalking and physical safety: An address, family connection, or workplace can expose survivors of domestic violence, stalking, or harassment.
- Fraud and impersonation: Personal details can make phishing messages and account-recovery scams more convincing.
- Inaccurate profiling: A wrong address, outdated relationship, or incorrect financial category may be repeated across several services.
- Unwanted marketing: Data may be used to target ads or categorize a household without a clear direct relationship.
- High-stakes decisions: If information is used in a consumer report for credit, employment, housing, or insurance, an error can cause more serious harm than an unwanted advertisement.
The risk isn't limited to one breach. Repeated collection, linking, and resale can make ordinary details easier to find and harder to correct.
Match the request to the use
There is no nationwide U.S. opt-out that covers every data broker. Start by identifying what the company does with the information:
| Situation | Rule or process to check | Best first step |
|---|---|---|
| Marketing, advertising, or data sharing | Your state privacy law and the company's privacy controls | Use the company's official opt-out page and a recognized privacy signal |
| People-search report | The site's opt-out process and any applicable state privacy law | Find the exact profile and submit a removal request |
| Credit, employment, housing, or insurance decision | The Fair Credit Reporting Act may apply | Ask which reporting company was used and dispute specific inaccuracies |
| Public-record information | Rules governing the original record and the broker's own process | Request suppression from the broker, but don't assume the source record will change |
| California resident's data held by a covered business | The California Consumer Privacy Act and related regulations | Request to know, delete, correct, or opt out as appropriate |
California privacy rights
The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act, gives eligible California consumers rights that can include:
- Knowing what personal information a covered business collects and how it is used
- Requesting deletion, subject to exceptions
- Requesting correction of inaccurate information
- Opting out of the sale or sharing of personal information
- Limiting certain uses of sensitive personal information
The California Attorney General's CCPA guidance explains that coverage depends on the business and the request. The law doesn't automatically require every company that holds information about a California resident to erase every record.
Businesses generally have 45 days to respond to a CCPA request. An allowed extension can add another 45 days when the business explains why it needs more time. Save the confirmation and the date you submitted the request.
California also recognizes a user-enabled GPC signal as an opt-out preference in covered situations. Under the CCPA guidance, a business must wait at least 12 months before asking a consumer to opt back in to the sale or sharing of personal information.
California has created the Delete Request and Opt-Out Platform, known as DROP, under the Delete Act. If you are a California resident, check the California Privacy Protection Agency's current instructions before relying on a third-party explanation of the platform. Treat a centralized request as a way to reach covered, registered brokers, not as a guarantee that public records or every database will disappear.
Federal consumer-reporting rules
The Fair Credit Reporting Act (FCRA) is not a general data-broker deletion law. It governs consumer reports used for specified purposes, including decisions about credit, employment, housing, or insurance. It also includes rules about accuracy, permissible purpose, and disputes.
A December 2024 Federal Register notice on harmful data broker practices proposed changes involving certain data-broker practices under Regulation V. The relevant proposed provision focused on four types of information: credit history, credit score, debt payments, and income or financial tier. The notice was a proposal, not an enacted nationwide deletion deadline.
If a report affected a decision about you, a normal marketing opt-out may not be enough. Ask for the name of the reporting company, obtain the report when available, and dispute each error through the reporting company and the relevant information furnisher. The FTC's FCRA guidance for furnishers explains duties that can apply to information supplied to consumer reporting agencies.
What Global Privacy Control does and doesn't do
Global Privacy Control, or GPC, is a browser or device signal that communicates your preference to opt out of certain sale, sharing, or targeted-advertising activities. The W3C GPC explainer describes how the signal works.
GPC can save time because it sends a preference automatically to participating websites. In California, a qualifying signal can serve as a legally recognized opt-out for covered businesses. Outside those situations, its legal effect and the businesses that honor it can vary.
GPC is not a data-cleanup tool. It generally doesn't:
- Find every existing broker profile
- Delete information already collected
- Remove public records
- Stop a company from using information for purposes outside the signal's scope
- Reach brokers that don't recognize the signal
Enable it, then submit direct requests for profiles that expose your address, relatives, phone number, or other sensitive details.
How to opt out of data brokers
1. Decide whether you want an opt-out, deletion, or correction
These requests serve different purposes:
- Opt-out: Ask a business to stop selling or sharing information covered by the applicable law or company policy.
- Deletion: Ask a covered business to remove information it holds, subject to legal and operational exceptions.
- Correction: Ask a business to fix inaccurate information.
If a form offers separate choices, select each option that matches your goal. An opt-out alone may leave the profile in place.
2. Prepare a private contact method
Use an email alias that you can access but don't use for banking or account recovery. Never reuse an important password on a broker's website.
Have enough information to help the site locate the right record, such as:
- Your name and common name variations
- Current and former cities or states
- A phone number or email address shown in the profile
Don't provide a Social Security number, complete financial account number, or unrelated identity documents just to submit a routine request. If a site asks for an identity document, verify that you are on the legitimate company domain, read how the document will be used, and provide only what is strictly necessary if you decide to continue.
3. Find the actual profile
Search for your name together with your city, state, phone number, or an old address. You can also search the site name plus phrases such as opt out, remove my information, or privacy request.
Open the result and confirm that it is really about you. A common name can lead you to someone else's record, so don't request removal of a profile you haven't matched carefully.
The FTC recommends repeating the process on other people-search sites. Removing one result doesn't notify every other company that has a similar record.
4. Use the company's official removal page
Look for links labeled:
- Remove my information
- Opt out
- Do not sell or share my personal information
- Privacy choices
- Delete or correct my information
Submit the request through the company's official website, not through a random form in an advertisement or a search result that redirects elsewhere. Complete any verification email or code, and read the confirmation. Some sites hide a public search result while retaining an underlying account record.
A short request is usually clearer than a long explanation:
Please delete the personal information associated with the identifiers I provided and opt me out of the sale or sharing of my personal information where those rights apply. Please tell me what additional information is needed to verify this request.
Use the terms that match your state law and the choices displayed by the company. Don't claim a right that may not apply to you.
5. Save proof
Keep a private log with:
- The broker's name and exact profile URL
- The date and time of the request
- The email address or phone number used
- A confirmation number or email
- Screenshots of the submitted form and final result
- Any stated completion date or reason for denial
This record gives you a timeline for follow-up and is useful if you contact a regulator or dispute a consumer report.
6. Check the result and repeat
After the company's stated processing period, search again using your name, phone number, and previous addresses. Check related pages for relatives and associates too.
If the profile remains, ask whether the company rejected the request, couldn't verify your identity, found no matching record, or relied on an exception. If the problem is a mistaken match, correct only the information needed to establish your identity instead of repeatedly sending more personal information.
There is no universal permanent-removal schedule. Data can be recollected from a new purchase, public filing, app, loyalty program, or another broker. Set a reminder to review high-risk listings periodically, especially after moving or changing phone numbers.
Should you pay for a data removal service?
Paid removal services can save time, but they don't create a universal deletion right and can't guarantee that information will never return.
| Option | Advantage | Limitation |
|---|---|---|
| Do-it-yourself requests | No subscription fee and direct control over each request | Requires research, follow-up, and repeated checks |
| Automated removal service | Can monitor and submit requests across many sites | Coverage varies, fees may recur, and some services provide suppression rather than deletion |
| One-time scan | Helps identify exposed profiles | A scan alone doesn't submit or verify removal requests |
Before paying, check:
- Whether the fee is one-time or recurring
- How cancellation works
- Which companies and subsidiaries are actually covered
- Whether the service deletes data or only hides search results
- How it verifies completed requests
- Whether it retains your identifying information
- Whether it sells or shares data with partners
- What happens after you cancel
A large coverage number isn't enough. A service may count multiple domains under one company, include sites that don't have a profile for you, or exclude local and specialized brokers. Don't give a removal service your email password, bank login, or unnecessary identity documents.
A VPN may reduce some future tracking, but it won't remove a profile built from public records or past transactions. Masked email addresses and separate phone numbers can limit future exposure, but they aren't substitutes for removal requests.
What an opt-out cannot guarantee
Even a successful request may not produce a clean slate. Information can remain because:
- The original government or commercial source still publishes or retains it
- Another broker has a separate copy
- A relative's or associate's profile includes your information
- The company kept data under a legal, security, or operational exception
- Search engines have not refreshed their results
- New information was collected after the request
- The company stopped selling the data but did not delete the existing profile
- The information is in a credit file governed by a different process
An opt-out of targeted advertising also doesn't necessarily stop first-party data collection by an app, retailer, lender, or website. Review those companies' privacy controls separately.
A credit freeze is different. It can restrict access to a credit file, but it doesn't remove a people-search listing or a marketing profile.
What to do about inaccurate or dangerous information
Inaccurate information
Take a screenshot or download a copy of the report before requesting a change. Mark each incorrect item and gather simple supporting evidence, such as a current bill showing the correct address or a document showing that a name is misspelled.
Ask the broker for a correction where that option is available. If the information was used for a credit, employment, housing, or insurance decision, use the applicable consumer-report dispute process instead of relying only on a people-search opt-out.
Stalking, doxxing, or safety concerns
Use the broker's removal process, but don't expose more information than necessary. Confirm the site domain before uploading documents. If a page reveals a current address or creates an immediate safety risk, contact a local victim-advocacy or address-confidentiality program for help choosing the safest process.
A deletion request won't resolve an immediate threat. Contact local emergency services when there is imminent danger, and preserve messages, URLs, screenshots, and dates.
How to escalate a failed request
A refusal doesn't always mean the company is ignoring you. Common reasons include a failed identity match, an incomplete request, a legal exception, or the company not being covered by the law you cited.
If the request still appears valid:
- Reply through the company's privacy or request channel and ask for the reason in writing.
- Correct only the information needed to verify the match.
- Keep the original confirmation and all follow-up dates.
- For a California request, review the California Attorney General's CCPA guidance and use the appropriate state complaint or enforcement route.
- For a consumer report used in a high-stakes decision, follow the reporting company's dispute instructions and identify the furnisher of the inaccurate information.
- If the conduct involves threats or harassment, prioritize personal safety over completing an online form.
A regulator complaint can create a record of the problem, but it isn't a guaranteed instant-removal mechanism.
Data broker opt-out FAQ
Are data brokers illegal?
No. A data broker's existence doesn't by itself prove a violation. Legality can depend on the information involved, how it was collected, the purpose of the sale, the business's disclosures, and the law covering the transaction. Particular practices can still violate privacy or consumer-protection rules.
Does opting out stop a broker from collecting my information?
Usually not. An opt-out generally addresses specified sales, sharing, or advertising uses. It doesn't normally stop every form of collection, erase information held by the original source, or prevent a new record from being created later.
Can one request remove me from every data broker?
Usually not. Brokers use separate systems and may not share removal requests. California's DROP process may reduce the number of separate requests for eligible residents and covered registered brokers, but it shouldn't be treated as removal from the entire internet.
Does GPC delete an existing profile?
No. GPC communicates an opt-out preference. Where the signal is recognized, it can reduce certain future sale or sharing activity, but you still need direct deletion or suppression requests for existing profiles.
How often should I repeat opt-outs?
There is no universal schedule. Recheck the sites that expose the most sensitive information after their stated processing period and periodically afterward. New data can enter a broker's systems from public filings, purchases, apps, or other data companies.
Is a paid removal service worth it?
It may be worthwhile if you have many listings and little time. Compare the recurring cost, coverage, identity-data handling, cancellation terms, and proof of completion. Manual requests take longer, but they let you control what you disclose and which companies you contact.
For a manageable first pass, enable GPC, remove the highest-risk people-search listing, and save the confirmation. If the information affected a financial, employment, housing, or insurance decision, ask for the consumer-reporting company and use its dispute process instead of relying on a marketing opt-out.