Keep the request and the broker's response before you escalate. Save the submission, confirmation, screenshots, and dates. Those details can show whether the broker ignored, denied, or only partly handled what you asked for.

Your route depends on the conduct, not the broker's marketing label. The FTC may fit potentially unfair or deceptive practices, a state office may fit state-law concerns, California's DROP may fit a covered deletion request, and the FCRA and CFPB process may matter if a qualifying consumer report is involved.

Filing creates a record. It doesn't automatically remove a profile, produce compensation, or require an agency to investigate your individual dispute.

Choose the route that matches the conduct

Thing is, different complaint routes do different jobs. The last row below applies to a separate jurisdiction, where the GDPR covers the complaint.

Fraud takes a different first step. If someone used your information to open an account or make a transaction, start with the FTC's identity theft guidance and contact your bank or payment provider. Don't treat that as an ordinary data broker complaint.

Save evidence before you file

A short, dated timeline usually beats a large file dump. Keep one folder. Boring records are useful here.

1. Identify the company behind the listing. Record its legal name, website, privacy page, and the URL where you found your profile. A people-search brand may not be the same as the company operating it.
2. Capture the problem. Take dated screenshots of the listing, incorrect information, sale or opt-out notice, and relevant account messages.
3. Send a narrow rights request. Use the broker's official privacy or consumer-rights channel. Say whether you want deletion, correction, access, or an opt-out.
4. Keep the reply. Save confirmation numbers, emails, verification notices, and the date the broker says it completed or denied the request.
5. Leave out unnecessary sensitive information. Never send passwords, verification codes, a complete Social Security number, or unrelated medical and financial records.

There isn't one U.S.-wide response clock for every broker request. Check the broker's policy and the law that actually applies. California's DROP schedule doesn't become the deadline for a request made somewhere else.

File an FTC complaint when the conduct may affect more than you

Use the FTC's Report Fraud portal if a broker may have misled consumers, ignored a published privacy choice, exposed sensitive information, or engaged in conduct that could affect many people.

Choose the closest privacy, security, or deceptive-practice category. Name the broker, give the relevant dates, describe your request and the response, and explain what happened afterward. Plain wording works best.

The FTC isn't a private dispute-resolution service. It generally won't promise to investigate your individual report, order a particular broker to delete your profile, or send you money. Reports can still help authorized law-enforcement agencies spot broader conduct.

Save the confirmation number. If you leave out contact details, follow-up may be limited. Never file using another person's identity.

Use California DROP for an eligible California deletion request

California's Delete Request and Opt-out Platform, or DROP, gives eligible residents one place to send deletion requests to data brokers covered by the system. It can save you from contacting each participating broker separately.

DROP requires you to verify that you qualify as a California resident under section 17014 of Title 18 of the California Code of Regulations, as that section read on September 1, 2017. If the verification providers can't confirm your status, the platform terms describe a review process under section 7622 of Title 11 of the California Code of Regulations. Use DROP only if you can truthfully say you qualify.

Starting August 1, 2026, covered data brokers must access DROP at least once every 45 days to retrieve deletion requests. When a request matches information in a broker's records, the broker must delete the matched personal information on a rolling 45-day basis, subject to applicable exemptions.

DROP says your status may take up to 90 days to appear. That delay reflects the platform's reporting process. By itself, it doesn't prove a broker ignored your request.

A DROP request and an enforcement complaint serve different purposes. For a separate complaint about misleading notices, a refusal outside DROP, or broader conduct, check the current instructions on the California Attorney General's CCPA page.

Check your state route outside California

Outside California, send the broker's rights request first, then check your state's privacy law and complaint process. Eligibility rules, exemptions, deadlines, and agency powers vary.

Use the official website of your state attorney general or privacy regulator. The National Association of Attorneys General site may help you locate the right office. Skip third-party forms that charge a fee or promise a guaranteed result.

Give the agency the broker's name, the right you tried to exercise, the response, and the evidence. Ask it to review the conduct. Don't demand money unless a specific law and process clearly provide that remedy.

Use the FCRA process for qualifying consumer reports

A people-search page isn't automatically a consumer report. If the information was used for credit, housing, employment, insurance, or another eligibility decision, the Fair Credit Reporting Act may apply.

Dispute the exact entry through the reporting company's official channel. Explain why it is wrong, attach relevant proof, and keep delivery records. Where appropriate, send the dispute to the furnisher too.

The CFPB's circular on reasonable investigations of consumer reporting disputes explains that a consumer reporting agency must provide relevant consumer information to the furnisher, and the furnisher must review relevant information. That process is different from asking a people-search website to remove a profile.

If the formal dispute remains unresolved, the CFPB complaint portal may fit a covered consumer-reporting or financial issue. The CFPB isn't a general privacy regulator, so it may not be the right place for a basic marketing-profile complaint.

Give the agency facts it can check

A clear chronology gives a reviewer something concrete to verify. Name the broker, identify the exact information at issue, and separate what you know from what you suspect.

Include the request date, submission method, confirmation number, response, and the fact that continued the problem. Mention actual harm carefully. Don't bury the key event in a large attachment pile.

Broker request and escalation template

Subject: Request to delete, correct, or stop using my personal information

To: [Broker name]

I am a resident of [state or country, if relevant]. On [date], I submitted a request through [website, email, or other method] asking you to [delete, correct, provide access to, or stop selling] my personal information.

My reference number is [number]. The information or profile at issue is [brief description].

On [date], you [denied the request, provided an incomplete response, failed to respond, or continued displaying the information]. The specific problem is [plain-language explanation].

Please review this request and confirm in writing what information was removed, corrected, or retained and why. I have attached [screenshots, correspondence, public records, or other supporting documents].

Please send your response to [email or mailing address].

Name: [name]
Date: [date]

Don't cite a law until you've checked that it applies. A wrong citation can distract from a strong factual record.

Regulator complaint summary template

Broker: [legal name and website]

Issue: [deletion, correction, access, opt-out, disclosure, security, or reporting accuracy]

Timeline:
- [Date]: I found or received [description].
- [Date]: I submitted [request] through [method].
- [Date]: The broker responded with [response], or did not respond.
- [Date]: The problem continued because [specific fact].

Evidence attached:
[confirmation, screenshots, policy page, correspondence, official records]

Requested review:
Please review whether the broker followed the applicable privacy, consumer-protection, or consumer-reporting requirements and published policy.

Example: inaccurate information on a people-search site

Suppose a people-search broker lists your current address and connects you to another person's criminal record. Save a screenshot and the page date, then send a correction or deletion request through the broker's official channel. Keep the confirmation.

If the broker refuses, the facts may support a report to the FTC or the relevant state office. If an employer or landlord used the same information in a screening report, use the formal consumer-report dispute process as well.

Turns out, one set of data can lead to more than one route. Its use matters.

What happens after you file

An agency may contact the company, combine your report with similar complaints, request more information, or take no visible action. You may not receive a detailed explanation.

Your direct request is usually the step aimed at deletion or correction. The agency complaint mainly reports possible unlawful or harmful conduct.

To be honest, there is no reliable universal success rate for data broker complaints. Results depend on the broker, the evidence, the remedy requested, the applicable law, and whether the conduct affects more than one person. State rules and exemptions vary, so this is general information rather than legal advice.

Frequently asked questions

Can an FTC complaint force a broker to delete my data?

Usually not. The FTC may use reports to identify enforcement targets, but it doesn't promise an individual deletion, investigation, or payment.

Can I file a data broker complaint anonymously?

Some forms let you omit contact information. Anonymity isn't guaranteed across agencies, and leaving out your details can make follow-up harder. Submit only what the form requires, and never invent an identity.

Should I file with both the FTC and my state regulator?

You can report the same conduct to both when each route fits. Use one accurate timeline, tailor the requested review to each agency, and don't send duplicate submissions without new evidence.

How long does a data broker complaint take?

There is no universal timeline. For California DROP requests, covered brokers begin the 45-day access cycle on August 1, 2026, and the platform says status updates may take up to 90 days. Other broker and agency processes vary.

What should I do first?

Open the broker's official privacy page and send a dated request. If you qualify as a California resident, use DROP; otherwise, keep the confirmation and consider the FTC or your state regulator once the record is complete.