If a data broker has the wrong information about you, preserve the page before asking for a change. Save the profile URL, the date and time, and screenshots of the information shown.
Then use the route that matches the problem: the FTC's ReportFraud portal for suspected deception or unfair conduct, the CFPB complaint portal for a consumer-report problem, or California's Delete Request and Opt-Out Platform if you're an eligible California resident.
The agency route matters. An agency complaint isn't a lawsuit, and it doesn't guarantee deletion, compensation, or an investigation of your individual case.
The red flags that deserve action
A troubling profile isn't automatically illegal. The details show what to preserve and which path may fit.
| Red flag | Why it matters | Evidence to keep |
|---|---|---|
| A profile combines you with another person or gives a wrong address, job, debt, license, or criminal record | If the information enters a consumer report, inaccurate data can affect housing, employment, credit, or insurance decisions | The complete profile, date viewed, and any decision or denial notice |
| A broker confirms an opt-out or deletion request, but the profile remains | The record may show that the company failed to follow its stated process or raise a privacy compliance concern | Confirmation email, ticket number, screenshots, and follow-up dates |
| Health, financial, precise location, or government ID information appears exposed or shared | Sensitive information can create greater risk, but the applicable rule depends on the data, purpose, and jurisdiction | The page or notice; don't repost the sensitive information |
| A privacy statement promises one thing while the site or request history suggests another | A misleading privacy promise can raise an FTC concern | The exact wording, page address, and saved date |
| Exposure is followed by account takeover or identity theft | The timing supports a risk report, but it doesn't prove the broker caused the loss | Bank notices, account records, identity theft reports, and the broker's response |
Turns out, an unwanted listing can fit several different categories. A marketing profile, a background report, and a breach notice may lead to different next steps.
A wrong background report needs a different path
An ordinary people-search page and a consumer report can look similar. Their dispute paths aren't the same.
The CFPB's guidance on background check reports and credit file sharing says background checks and other consumer reports should be accurate, up to date, and available to the people they concern. These reports can contain credit, rental, employment, salary, licensing, criminal, and driving information.
Begin with the reporting company named in the report or notice. Identify every wrong item, explain the error plainly, and attach records that support your explanation.
If the response doesn't resolve the issue, file a complaint with the CFPB. Companies generally respond within 15 days. You can review the response and provide feedback within 60 days.
A people-search listing may not be a consumer report under the Fair Credit Reporting Act. Don't call every inaccurate listing an FCRA violation just because the information is wrong.
Pick the complaint route
Match the channel to the way the information was collected or used.
| Route | Use it for | What to expect |
|---|---|---|
| The broker's official privacy channel | A correction, deletion, access, or opt-out request | The company may ask you to verify your identity. Save the confirmation and stated processing time. |
| FTC's ReportFraud portal | Misleading privacy promises, suspected deception, unfair conduct, or a pattern of ignored requests | The report helps regulators identify marketplace problems. It doesn't order individual deletion or guarantee compensation. |
| The reporting company, then the CFPB | A wrong credit, employment, housing, insurance, or background report | Dispute the information directly first. Keep proof of the dispute and escalate if the response doesn't fix it. |
| California's Delete Request and Opt-Out Platform | A California resident's deletion request involving data brokers | DROP verifies California residency. Starting August 1, 2026, data brokers must access DROP and process requests at least every 45 days, subject to exceptions. |
| California's CCPA privacy page | Information about a suspected California privacy violation and the state complaint route | A complaint doesn't automatically create a private lawsuit or award damages. |
The FTC and CFPB do different jobs here. The FTC focuses on marketplace conduct; the CFPB is the better fit for covered consumer-report problems.
Build a record before you file
A useful complaint tells a simple story: what appeared, what you requested, and what the company did afterward.
-
Capture the original page. Save the broker's name, profile address, date, time, inaccurate fields, and relevant privacy language. Take screenshots before requesting removal.
-
Identify how the information was used. Was it a marketing profile, a people-search result, a background report, or information used in a credit or housing decision? Read any adverse-action notice carefully.
-
Send a direct request. Use the broker's current official privacy page. State whether you want a correction, deletion, or opt-out. Don't rely on a random contact address from a search result.
-
Use the matching escalation route. Report suspected deception to the FTC. For a consumer-report problem, dispute it with the reporting company before using the CFPB. California residents can use DROP for broker deletion requests and review the state privacy complaint route when appropriate.
-
Keep a dated timeline. Put the request, confirmation, reply, attachments, and follow-ups in one folder. To be honest, the dates usually matter more than memory.
-
Deal with immediate identity risks. If the exposure includes an account, Social Security number, payment card, or login, contact the affected institution, change reused passwords, and consider a credit freeze.
Keep the ugly first version. Later screenshots may show that the page changed.
A complaint message you can adapt
Your message doesn't need legal language. Name the record, explain the problem, and identify the action you want.
Subject: Request to correct, delete, or stop sharing personal information
I am [full name]. I found a profile about me at [profile address] on [date].
The profile contains this problem:
[Describe the inaccurate, outdated, or sensitive information.]
The information is incorrect or concerning because:
[Give a short factual explanation.]
On [date], I submitted a [correction, deletion, or opt-out] request through [website or email]. My confirmation or ticket number is [number]. [The listing remains online / I received no response / the response did not address the problem.]
Please confirm what information you hold about me and process the request that applies to this record. If this information was provided in a consumer report, treat the identified items as a dispute and provide the results.
I have attached:
[List only relevant documents.]
Name:
Email:A California resident can add: "I am a California resident and request deletion of my personal information and any applicable opt-out under California privacy law."
Send the message through the broker's official privacy channel. Avoid passwords, full payment details, and a complete Social Security number unless an official process clearly requires them.
California residents and DROP
California's DROP platform lets eligible residents send a deletion request to data brokers from one place. It requires a residency check before submission.
Starting August 1, 2026, data brokers must access DROP and process deletion requests at least every 45 days, subject to limited exceptions. That is a recurring processing schedule, not a promise of instant removal.
A broker may retain information covered by an exception. If the information also appeared in a consumer report, you may need a separate FCRA dispute.
For a suspected CCPA business privacy violation, review the California Attorney General's CCPA privacy page. Don't assume that filing a complaint creates a fixed payment.
What your evidence can and cannot prove
Thing is, evidence has limits.
A screenshot shows that a page displayed certain information on a particular date. It doesn't establish who supplied the data, every person who received it, or the exact cause of a financial loss.
A confirmation email helps show that you made a request. It may not show that an affiliate, client, or separate reporting company removed every copy.
An FTC, CFPB, or state complaint creates a useful record. It isn't a private judgment against the broker.
Common questions
Does a lack of consent prove that a data sale was illegal?
No. Some data brokers rely on public records, commercial sources, notice, or opt-out systems. The data type, purpose, business conduct, and applicable law all matter.
Should I contact the FTC or CFPB first?
For a wrong consumer report, dispute the information with the reporting company first. Consider the CFPB if the problem remains. Use the FTC for suspected deception or unfair marketplace conduct.
Will an FTC complaint remove my listing?
Not necessarily. A direct broker request is the more direct removal path. Eligible California residents can also use DROP. The FTC doesn't promise individual deletion or compensation.
Can I use DROP if I don't live in California?
DROP requires California residency verification. If you live elsewhere, use the broker's official privacy process and check which privacy regulator is available in your state.
Open a folder now. Put the original screenshot, profile URL, and dated request inside. Then file through the route tied to how the information was used.