Data-broker complaints usually have two separate tracks. You can ask a company to remove, correct, suppress, or stop selling your information, and you can report the conduct to a regulator. Filing an FTC or state complaint doesn't, by itself, delete a profile, award compensation, or guarantee an investigation.

There is no single U.S. opt-out form that covers every data broker. The best route depends on where you live, what information is involved, how the company uses it, and whether a privacy law covers the company or the request.

What counts as a data-broker problem?

People-search sites and other brokers may compile names, addresses, phone numbers, property records, purchase activity, online identifiers, location information, and inferred interests. A profile's existence alone isn't necessarily unlawful. The company's conduct, the type of data, and how the information is used matter.

You may have a stronger reason to act when:

• The company ignores a deletion, correction, or opt-out request.
• The profile contains inaccurate or unusually sensitive information.
• The listing creates a stalking, harassment, or personal-safety risk.
• The broker appears to sell precise location, health, religious, or political information without meaningful consent.
• The information is used for a credit, employment, housing, insurance, or similar decision.
• Your information appeared after identity theft or a security breach.

Recent FTC actions involving Mobilewalla's collection and sale of sensitive location data and the X-Mode Social and Outlogic location-data order show that sensitive-data practices can draw federal scrutiny. Those cases don't establish that every data broker has broken the law.

Match the remedy to the problem

A privacy opt-out isn't the same as a credit freeze. Removing a people-search listing also won't necessarily stop a consumer reporting company from keeping a file.

1. Save evidence before you request removal

Capture the profile before it changes. Save the complete page address, the date and time, the profile or record number, and the exact information you want removed or corrected.

Keep these items together:

• The broker's name and the URL where the information appeared
• Screenshots of the listing, including sensitive or inaccurate fields
• The name, address, phone number, email address, or other identifiers used to match you
• A copy of your opt-out, deletion, or correction request
• Confirmation emails, ticket numbers, and verification messages
• The submission date and the date a response was due
• Any refusal, explanation, or notice that the company couldn't verify you
• Evidence of harm, such as impersonation, harassment, financial loss, or exposure of sensitive location information

Don't send a full Social Security number, passport, or driver's license unless there is a clear and legitimate verification reason. If an identity document is required, submit it through a secure official form and redact information that isn't needed.

2. Check which privacy law applies

For a state privacy request, begin with the state where you live. Laws use different definitions, exemptions, coverage rules, and verification procedures. Another law may also control the information, or the company may fall outside the applicable state's coverage.

California: CCPA and CPRA

California consumers may have rights to access, delete, correct, and opt out of the sale or sharing of personal information. The right to limit some uses of sensitive personal information may also apply. Business-coverage rules and exceptions can limit those rights.

Start with the broker's privacy request form. Then check the California Attorney General's consumer privacy guidance to confirm the request and complaint route. Covered businesses generally have 45 days to respond, although an allowed extension may apply when the business gives notice.

Virginia: VCDPA

The Virginia Consumer Data Protection Act gives qualifying consumers rights that can include access, correction, deletion, portability, and opting out of the sale of personal data, targeted advertising, or certain profiling.

Review the Virginia Consumer Data Protection Act in the Code of Virginia before citing the law in a request. The statute includes exemptions and verification rules. Virginia's attorney general is the public enforcement route; the act doesn't create a private lawsuit process for an individual consumer.

Colorado: CPA

The Colorado Privacy Act provides qualifying consumers with rights that can include access, correction, deletion, portability, and opt-outs for sale, targeted advertising, and certain profiling. The Colorado Attorney General's privacy resource explains the law and its enforcement.

Colorado generally uses an initial response period of about 45 days, with possible extensions in qualifying circumstances. Read the company's response notice and current state guidance instead of assuming every request has the same deadline.

Other states

Other states may provide privacy rights, maintain data-broker registries, protect sensitive information, or offer only limited remedies. Don't claim a California, Virginia, or Colorado right if you live elsewhere unless your state's law provides a similar right. Even without a specific state right, you can use the company's voluntary opt-out process and report deceptive or harmful conduct.

3. Send the broker's official request

Find the company's current privacy page directly. Avoid search advertisements and unfamiliar third-party forms that ask for more information than necessary.

Choose the request that fits your goal:

• Delete or suppress my information if you want the profile removed from public display.
• Correct my information if the company offers a correction process.
• Do not sell or share my information when that right applies.
• Limit targeted advertising or profiling when state law provides that option.
• Tell me what information you hold if you need to learn the source, categories, or uses before choosing a remedy.

Give the company enough information to match the record, but no more than it needs. Save the completed form, verification email, ticket number, and any written response. Ask the company to confirm what it did and when.

A request template

Keep the message factual. Don't threaten penalties you can't establish.

Subject: Request to delete, correct, or opt out of personal information

I am requesting that [company name]:

[ ] Delete or suppress my personal information
[ ] Correct the following inaccurate information: [describe it]
[ ] Stop selling or sharing my information where applicable
[ ] Tell me the reason for any denial and the available appeal process

The information associated with me is:
Name: [full name]
Current or former location: [city and state]
Email or phone used for matching: [only what is necessary]
Profile URL or record number: [URL or ID]

I am a resident of [state]. Please confirm receipt of this request and confirm
when it has been completed. If you need additional verification, explain what
is required and how it will be used.

Date:
Name:

If the company denies the request, ask whether the reason is identity verification, an exemption, lack of coverage, or the absence of a matching record. When the applicable law provides an appeal process, use it before escalating.

Common broker opt-out pages

URLs, verification requirements, and coverage can change. Treat these as starting points and follow the current instructions on each page. Opting out of one company won't remove you from unrelated brokers.

A successful suppression request may remove a public profile without deleting every copy of the information in the company's systems. A company may retain limited information to honor the opt-out, comply with law, prevent fraud, or handle a later request.

4. Report the conduct to the FTC

Use the FTC's Report Fraud website when the conduct appears deceptive, unfair, harmful, or connected to identity theft, privacy, or data-security concerns.

Describe:

1. The broker's legal or operating name and the website involved
2. What information was displayed, collected, sold, or inferred
3. Why the practice was misleading, harmful, or inconsistent with the company's privacy promises
4. The dates when you found the information, submitted your request, received a response, and followed up
5. The result, such as no response, refusal, reappearance, or exposure of sensitive data
6. The steps you took and the evidence you kept

Choose the closest category on the form. The categories and questions can change, and there may not be a dedicated data-broker option.

An FTC report isn't a private lawsuit or an individual dispute procedure. The FTC uses reports to identify patterns and decide where to direct enforcement resources. It doesn't promise that the company will remove your profile or that you'll receive a personal response. Keep your original screenshots and correspondence after filing.

5. Contact your state attorney general

A state complaint is more useful when you can connect the conduct to a state privacy right, a deceptive privacy statement, or a failure to follow the state's request process.

Include a short evidence package containing:

• Your state and the reason you believe its law applies
• The original profile or data disclosure
• Your request and the company's response
• The deadline that passed, if a statutory deadline applies
• The result you want, such as deletion, correction, suppression, or an explanation
• Any safety, identity-theft, or financial harm

File once with a clear timeline rather than sending duplicate submissions. Add documents later if the office asks for them. An attorney general may investigate, refer the matter, or take no action; a complaint doesn't guarantee an individual remedy.

If your state has no clear privacy complaint route, use the official attorney general consumer-protection website instead of a paid filing service.

When the Fair Credit Reporting Act may apply

A data broker and a consumer reporting agency aren't automatically the same thing. The Fair Credit Reporting Act can apply when information is assembled or used for certain eligibility decisions, including credit, employment, housing, or insurance.

If the information appears in a credit report:

• Obtain reports through AnnualCreditReport.com.
• Identify the inaccurate item and the company that supplied it.
• Dispute the information with the reporting company and, when appropriate, the furnisher.
• Keep the dispute, supporting documents, and delivery confirmation.
• Check later reports to see whether the correction appears.

An FTC complaint usually isn't a substitute for the applicable credit-report dispute process. The facts surrounding the report determine which protections and procedures apply.

For suspected identity theft, use IdentityTheft.gov, place freezes or alerts with the relevant credit bureaus, and contact local law enforcement if there is an immediate safety threat.

What a complaint can and can't do

A complaint can create a record, alert regulators to a pattern, and support a later investigation. It can also show that you gave the company notice of the problem.

It generally can't:

• Force every broker to remove the same information
• Erase public records or information held by unrelated companies
• Guarantee a response from the FTC or an attorney general
• Award compensation by itself
• Replace a credit-report dispute
• Prevent information from returning after a new source supplies it

Whether private legal action is available depends on the facts. Relevant issues may include the state law, the company's terms, the type and use of the data, measurable harm, arbitration provisions, and exemptions. Preserve your evidence before seeking legal advice.

DIY removal or a paid service?

A removal service can submit requests to several companies and monitor for reappearance. It may also charge a recurring fee and need personal information to verify your identity. A service can't create rights that you don't have under the applicable law.

Before hiring a service, check the brokers it covers, how often it resubmits requests, how it handles your information, how cancellation works, and whether you receive copies of its submissions. If only a few profiles are involved, the official broker pages are usually the simplest place to begin.

Keep a removal log

A spreadsheet or document can track:

• Broker
• Profile URL or record number
• Request type
• Submission date
• Verification status
• Confirmation number
• Legal deadline, if applicable
• Response received
• Follow-up date
• Final result

Search for your name, phone number, and old addresses again after the request is processed. If a listing returns, save the new URL and check whether it came from a different broker or source. That tells you whether to repeat the request or report a wider pattern.

Frequently asked questions

Should I file with the FTC before contacting the broker?

Usually, send the direct opt-out, deletion, or correction request first. The response, refusal, or lack of response gives the regulator a clearer record. File with the FTC sooner when there is an urgent safety risk, identity theft, sensitive location data, or conduct that appears deceptive. You can still contact the broker afterward.

How long should I wait?

Follow the deadline for your state and the type of request. California, Virginia, and Colorado commonly use an initial 45-day framework, subject to extensions or exceptions. If no state law applies, follow the broker's stated processing time and keep proof that you submitted the request.

What if the broker says it can't verify me?

Ask what information it needs and whether another verification method is available. Provide only the minimum necessary. If the company requests excessive or suspicious documents, save the request and consider reporting it to your state regulator or the FTC.

Does one opt-out remove me from every data broker?

No. Brokers use different sources and may share information with affiliates or customers. You may need to submit separate requests and check for reappearance.

Is there a guaranteed success rate?

No universal success rate applies. Results depend on the broker, the source of the information, your ability to verify the record, state-law coverage, and applicable exceptions. A regulator's enforcement result also doesn't predict what will happen to an individual profile.

Save the profile URL and screenshots first. Then send the broker's official request, record the response deadline, and escalate with the same evidence if the company ignores a covered request or continues a harmful practice.