How to Remove Personal Information From Data Brokers in 2026

Your home address, phone number, relatives, age, email addresses, property records, and past locations may be available through people-search and data broker websites. This information can fuel spam, stalking, impersonation, phishing, SIM-swap attacks, and identity theft.

Removing it is possible, but the process differs between the United States, European Union, and United Kingdom. This guide explains how to find exposed profiles, submit effective deletion requests, verify the result, and reduce the chance that your information returns.

Privacy shortcut: Search for yourself, document every listing, use each broker’s official opt-out form, verify by email, and repeat the search every few months. Never pay a broker to remove information from its own site unless no free legal option exists.

What Is a Data Broker?

A data broker collects personal information from multiple sources, organizes it, and sells or shares it. Consumer-facing people-search sites are one type of broker. Others provide marketing profiles, fraud scores, location data, identity verification, or risk information to businesses.

The U.S. Federal Trade Commission explains that people-search sites may combine public records, public social-media profiles, and information purchased from other brokers into reports sold to customers.

What Information Can Be Exposed?

• Full name, aliases, and age
• Current and previous home addresses
• Mobile and landline numbers
• Email addresses
• Relatives, partners, and household members
• Property ownership and estimated value
• Professional history and social profiles
• Possible interests, purchases, and demographic categories
• Court, licensing, or other public-record information where legally available

A listing does not need to contain a Social Security number or passport number to be dangerous. A detailed profile can help a criminal answer security questions, craft a convincing phishing message, or impersonate you to a mobile carrier.

Step 1: Find Where Your Data Appears

Open a private browser window and search:

• Your full name in quotation marks
• Your name plus city or state
• Your phone number in several formats
• Your email address in quotation marks
• Your street address in quotation marks
• Old names, addresses, and phone numbers

Try major search engines used in the United States and Europe. Search images as well as text. Record each result in a spreadsheet with the broker name, profile URL, date found, opt-out URL, request date, verification date, and status.

Step 2: Separate Brokers From Original Sources

Data broker deletion does not always remove the original public record. A property record, professional license, company filing, or court document may be maintained by a government authority under local law.

Removing the broker copy still reduces casual exposure. If the original record creates a safety risk, contact the responsible authority and ask whether address confidentiality, record sealing, suppression, or a protected-person program is available.

Step 3: Use the Broker’s Official Opt-Out Page

Look for links labeled Privacy, Do Not Sell or Share My Personal Information, Delete My Data, Your Privacy Choices, or Opt Out. If the option is hard to find, search the broker’s exact name plus “official opt out.”

A typical process requires you to:

1. Find the profile that belongs to you.
2. Copy its exact URL.
3. Enter an email address to receive verification.
4. Open the verification message and confirm the request.
5. Wait for processing, then search again.

Consider creating a separate email alias for privacy requests. It keeps confirmations organized and avoids giving a broker your main inbox. Do not provide additional identity documents unless necessary to verify the request.

Step 4: Share the Minimum Information Needed

A broker may need enough information to identify the correct record. That does not mean it should receive an unredacted passport, driver’s license, or tax document.

• Ask why each requested item is necessary.
• Use the broker’s secure official portal, not an email address from a search ad.
• Redact document numbers, photographs, signatures, and unrelated data where accepted.
• Watermark any copy: “For privacy deletion verification only,” with the date and company name.
• Never send payment card details to prove identity.

United States: Privacy Rights and the California DROP System

The United States does not have one universal federal deletion right covering every data broker. Rights depend on state law, the type of data, and the company’s obligations.

California’s Delete Act created the Delete Request and Opt-Out Platform (DROP). According to the California Privacy Protection Agency, registered data brokers must begin accessing the mechanism at least once every 45 days and processing eligible deletion requests beginning August 1, 2026, subject to limited exceptions.

California residents should use the official state privacy website and verify the domain before submitting information. Residents of other states should check the website of their state attorney general or privacy regulator for current consumer rights and authorized request mechanisms.

Do not confuse deletion with a credit freeze

Removing a people-search listing does not freeze your credit. U.S. consumers concerned about identity theft should separately consider freezes with Equifax, Experian, and TransUnion. A freeze can make it harder for criminals to open new credit, while broker deletion reduces public exposure.

European Union and EEA: Using the GDPR Right to Erasure

Under the GDPR, people can ask an organization to delete personal data in certain circumstances. The right is not absolute. For example, data may sometimes be retained for legal obligations, freedom of expression, public interest, or legal claims.

The European Commission states that organizations generally must respond to rights requests without undue delay and, in principle, within one month. They may request additional information to confirm identity.

GDPR erasure request template

Subject: Request for erasure of personal data under Article 17 GDPR

I am requesting deletion of personal data relating to me that your organization processes, including the profile available at: [URL].

The data is no longer necessary for the purpose for which it was collected and/or I object to its processing. Please confirm the categories of data deleted, any recipients notified where applicable, and the date the deletion was completed.

Please also explain any data you refuse to delete, the legal basis for retaining it, and my right to complain to the relevant supervisory authority.

Name: [Name]
Country: [Country]
Verification information: [Minimum necessary information]

If the organization ignores or rejects a valid request without a sufficient explanation, contact the data protection authority in your country.

United Kingdom: The Right to Erasure

UK residents can ask organizations to erase personal data in certain circumstances under the UK GDPR. The Information Commissioner’s Office provides consumer guidance and notes that the right is also known as the “right to be forgotten.” It is not unlimited, so organizations may lawfully keep some records.

Use the same written approach: identify the data, state that you are requesting erasure, provide the profile URL, and ask for a written response. If the response is inadequate, follow the ICO complaint process.

Step 5: Request Search Result Removal When Appropriate

Deleting the source is the most effective step, but search engines may continue to show an old cached result for a time. After the source page changes, use the search engine’s official tool to refresh or remove outdated content.

In the EU and UK, people may also request delisting of certain name-based search results under applicable data protection law. Delisting does not necessarily delete the source page and is assessed against public-interest considerations.

Step 6: Verify the Deletion

1. Save the broker’s confirmation message.
2. Revisit the exact profile URL after the stated processing period.
3. Search your name, number, email, and address again in a private window.
4. Check that duplicate profiles and alternate spellings are also gone.
5. Record the result and date.

Do not rely only on the email confirmation. A profile may remain indexed, appear under another URL, or return after the broker receives fresh information.

Step 7: Prevent Your Data From Returning

• Make social-media profiles private where practical.
• Remove your phone number, birthday, and home address from public profiles.
• Use email aliases for shopping, newsletters, and public registrations.
• Use a business mailbox or lawful address alternative when you do not need to publish a home address.
• Opt out of marketing data sharing when accounts offer the choice.
• Delete unused accounts that contain old personal information.
• Review app permissions and advertising identifiers.
• Repeat broker searches every three to six months.

Free Opt-Outs vs. Paid Removal Services

You can submit most opt-out requests yourself at no cost. A paid removal service can save time by monitoring many brokers and resubmitting requests, but it also requires you to trust another company with identity information.

Before paying, check:

• Which brokers and countries are covered
• Whether removals are one-time or continuously monitored
• What personal data the service collects
• How verification documents are stored and deleted
• Whether the service sells, shares, or uses customer data for advertising
• How cancellation affects future monitoring

No service can guarantee removal from every public record, search engine, private database, forum, or breach collection.

What If Your Data Is Already on the Dark Web?

Broker opt-outs do not erase copies stolen in a data breach or posted in criminal forums. If a monitoring alert shows exposed passwords, replace them immediately with unique credentials. Protect email and financial accounts with passkeys or strong two-factor authentication.

Read our guide on checking whether your data is on the dark web and what to do next.

Data Broker Removal FAQ

How long does removal take?

It varies from days to several weeks. GDPR and UK GDPR requests generally have formal response timelines, while U.S. timing depends on state law and the company.

Will the broker notify me if the data returns?

Usually not. Manual rechecks or a reputable monitoring service are needed.

Can a broker refuse deletion?

Sometimes. Exceptions may apply for legal compliance, fraud prevention, public records, public interest, freedom of expression, or legal claims. Ask for the specific legal basis.

Should I use a fake identity for opt-outs?

No. Incorrect information can prevent the broker from matching the right profile. Provide only the minimum accurate data required.

The Bottom Line

Data broker removal is not a one-click permanent fix. It is an ongoing privacy routine: discover listings, submit official requests, verify deletion, reduce public exposure, and check again later.

Start with profiles containing your home address and phone number, then work through lower-risk listings. Every unnecessary record you remove gives scammers less material for impersonation and targeted attacks.