Yes. Opting out of a data broker is legal for U.S. consumers. Figuring out whether your request stops a sale or actually removes a listing is the real work, since deletion usually hangs on state law or the broker's policy.
Can one form wipe you from the internet? No.
An opt-out may take a profile off one site without touching source records, affiliate copies, or information shown in someone else's profile.
What a data broker opt-out actually changes
People often use "opt out" and "delete" as if they mean the same thing. They don't.
| Request | What it generally asks for | What it may not do |
|---|---|---|
| Opt out of sale or sharing | Stop specified uses of your personal information | Remove the profile or erase old records |
| Delete personal information | Erase information held by the business, subject to applicable exceptions | Remove the original public record or another company's copy |
| Suppress a marketing profile | Keep your information out of a particular audience or product | Remove a people-search listing |
Read the confirmation carefully. A message saying your request was received is not always a message saying every record was deleted.
Why the answer depends on your state
The U.S. does not have one national data-broker form that covers every company.
State privacy laws fill some of that gap. They still don't share the same definitions, deadlines, or exceptions. Your residency may matter more than the broker's headquarters.
Coverage can depend on the company's size, the type of information involved, whether you have a direct relationship with the company, and the purpose for which the data is used.
Turns out a refusal isn't automatically illegal. Check the law before you assume it is.
California has a centralized deletion option
California residents can send data broker deletion requests through the state-run Delete Request and Opt-out Platform, known as DROP. The official DROP platform requires users to verify California residency before submitting a deletion request. The platform states that data brokers must process deletion requests at least once every 45 days beginning August 1, 2026. That 45-day cycle is California's DROP process.
It isn't a nationwide 45-day rule.
California's CCPA, as amended by the CPRA, gives covered consumers rights that include requesting deletion and opting out of the sale or sharing of personal information. The California Attorney General's CCPA guidance describes those rights. The guidance also covers limits that can apply.
California also treats a user-enabled Global Privacy Control, or GPC, as an opt-out signal for sale or sharing.
GPC is useful. It isn't the same as asking a business to delete every record about you.
Covered California businesses must also wait at least 12 months before asking a consumer to opt back in to the sale or sharing of personal information. That 12-month wait is California-specific.
Other states do not use one rulebook
Start with your state's attorney general or privacy regulator, and look for the exact right involved.
Texas, Florida, Colorado, and Virginia are examples of states with consumer privacy frameworks. Their laws can provide rights involving deletion, sale, targeted advertising, or sensitive information, but the details differ.
An opt-out of targeted advertising may be narrower than a deletion right, and a data broker may qualify for one right but not another. Read the current statute for your state. Don't rely on a generic list of states or a broker's marketing claim. Check the company's privacy notice too.
Federal rules cover only parts of the problem
Federal law does not give every U.S. resident a universal deletion button for every data broker. An advertised opt-out that doesn't work may raise an unfair or deceptive-practices concern, though you still don't get an automatic deletion order.
If you're dealing with people-search sites, the FTC's consumer guidance on people-search sites recommends finding each site's opt-out process and repeating it across other sites. That's a practical place to start. An FTC complaint can help flag deceptive patterns or misleading promises. It isn't a personal deletion order. It may not produce a quick result for one requester.
The FTC's Disposal Rule is narrower, and it requires covered businesses to dispose of information from consumer reports properly to guard against unauthorized access or use. It isn't a right to erase every marketing profile.
Don't confuse a marketing profile with a consumer report. If information is used to make decisions about credit, employment, housing, or insurance, different consumer-reporting rules and dispute procedures may apply.
Opting out of Acxiom, Spokeo, and similar sites
Acxiom and Spokeo don't share one opt-out system. A request sent to one company will not automatically remove you from another company's database.
Use the current privacy or opt-out page on the company's own website, and avoid entering sensitive information into an unfamiliar removal form that merely copies a broker's branding.
| Site or category | Practical approach | What to check afterward |
|---|---|---|
| Acxiom | Find the current official privacy or opt-out process and identify the information or product covered | Whether the confirmation covers one database, a marketing audience, or additional products |
| Spokeo | Start with the exact profile URL and follow the site's current removal instructions | Duplicate listings, alternate spellings, and related profiles |
| Other people-search sites | Repeat the process for each site, as the FTC recommends | Whether your information appears in reports about relatives, neighbors, or associates |
To be honest, the process sounds simple and it isn't always. A broker may ask for information to verify that you are the person connected to the record, so use a trusted domain and provide only what the process reasonably requires. Ask whether you can redact unrelated details.
A practical opt-out and deletion workflow
- Save the listing first. Keep the profile URL, take screenshots, and note the date. Write down the name, address, phone number, email address, and other details shown.
- Write down your state of residence. Decide whether you want deletion, an opt-out of sale or sharing, or both.
- Read the broker's privacy notice. Look for the company's definition of deletion, covered data, verification requirements, exceptions, and response timeline.
- Use the official request channel. Submit through the broker's own site or, if you are eligible, California's DROP platform. In California, GPC can signal an opt-out of sale or sharing.
- Handle verification carefully. Confirm why information is requested. Ask about a narrower verification method if the form demands more data than seems necessary.
- Save every piece of proof. Keep the submitted form, confirmation email, ticket number, screenshots, and any reply from the company.
- Recheck after the stated deadline. Don't automatically apply a California deadline to another state or to a voluntary broker policy.
- Escalate with your records. Contact the appropriate state regulator. Report deceptive or misleading practices to the FTC when that is the issue.
Keep a simple log. One request is easy to forget. Ten requests become a project.
If the broker refuses or ignores you
A refusal might involve identity verification, an exemption, a record the company must retain, or a request that was too broad for the broker's process. Ask for the explanation in writing.
Request the specific reason for the denial, the information the company kept, the legal or policy basis for keeping it, and any available appeal process.
If the broker doesn't respond, send one focused follow-up. Attach your original confirmation. Use the relevant state attorney general or privacy regulator next.
California consumers can begin with the Attorney General's CCPA guidance and the official DROP platform. California's guidance describes written notice and a 30-day cure step before a qualifying CCPA lawsuit. Don't treat every denied deletion as a private claim. Government penalties, statutory damages, and actual loss are different things.
Deletion has real limits
Thing is, a deletion request usually only changes the broker's own copy of your information, which still helps, but it does not wipe the public record that fed the listing and it does not empty another company's database, and that last piece is what people miss when they think one click should close the whole file.
The FTC warns that personal information may continue to appear in reports about relatives, neighbors, or associates. A listing can also return if a company collects the information again through a source not covered by your earlier request.
Ask which product or database the request covered. Ask whether affiliates, contractors, or separate brands received the same information. Get the answer in writing when you can.
Common questions
Is it legal to opt out of Spokeo or Acxiom?
Yes. Sending an opt-out or deletion request isn't illegal. Whether the company must honor a particular request depends on the applicable law, the data involved, and the company's stated process.
Can I force a data broker to delete my information?
Sometimes. A covered state law may give you a deletion right. The broker may also promise deletion in its policy. Without that legal or contractual basis, a request or complaint may not compel the company to erase every record.
Does one opt-out remove me from all data brokers?
No. Data brokers operate separate systems. You'll generally need to submit a request to each relevant company and check related people-search sites.
Can a broker ask for identification?
It may request verification in some circumstances. Confirm that you are using the real company site. Avoid sending unnecessary information. Ask about a less intrusive verification method.
Is re-enrollment after an opt-out always illegal?
No single nationwide rule answers that question. California's 12-month restriction on asking consumers to opt back in to sale or sharing is narrower than a blanket ban on collecting information again.
Will an FTC complaint make a broker delete my data?
Not necessarily. The FTC may investigate broader deceptive conduct, but a complaint won't guarantee a personal deletion result or a fixed response time.
This is general consumer information, not legal advice. If a listing creates a stalking, domestic-violence, employment, housing, or credit risk, seek help suited to that specific situation.
Start with one exact listing today. Save the evidence. Send the narrowest official request that matches your goal, and set a date to check the result.