An opt-out is a request that a data broker stop selling your information, delete what it holds, or both — and in several jurisdictions they're legally obliged to honour it. The process is broadly the same everywhere: find the broker's opt-out page, locate your own listing, submit the request, confirm by email. The friction is deliberate, and the identity-verification step is where most people give up.
What an opt-out actually asks for
Two different things get called the same word:
- Do-not-sell — stop sharing or selling your data onward. The record stays; the trade stops.
- Deletion — remove the record entirely.
Deletion is what most people want. Some brokers offer only the first, and some quietly treat an unresolved deletion request as an opt-out instead. Read which one you're submitting.
The process
- Search your own name first and note which sites actually list you. Work from that list, not from a generic "top 100 brokers" article — those sites are the ones costing you something.
- Find the opt-out page, usually linked in the footer as "Do Not Sell My Personal Information", "Privacy", or "Opt Out".
- Locate your listing and copy its URL. Many brokers require the specific record, not just your name.
- Submit the request.
- Confirm by email if asked — and use an alias here, not your main address. You are handing an email address to a data broker.
- Record what you submitted and when, so you can tell later whether it was honoured.
The verification paradox
To remove your data you have to identify yourself to the broker — which often means providing information to a company you're trying to get away from. There's a legitimate reason for it: they must be sure they're not deleting the wrong person's record, or letting someone else delete yours.
Provide only what's needed to match the listing you found. Be wary of any form demanding a government ID to remove a listing that shows nothing more than your name and city — that's a request for far more than the task requires, and it's a reasonable point to stop.
What the law requires
Effectiveness depends heavily on where you live.
California goes furthest. Under the Delete Act, brokers must register with the state, and since 1 August 2026 registered brokers must access the state's deletion mechanism at least once every 45 days and process the requests they find. There's a single free platform — DROP — instead of hundreds of individual forms. Source: CPPA. Checked: 2026-08-19. How DROP works
EU and UK: the GDPR right to erasure applies to brokers as to anyone else. No central portal, so it's per-broker, but the legal weight is real.
Other US states: Vermont, Texas and Oregon maintain broker registries with their own requirements. A registry at least tells you who to contact.
Elsewhere: protections range from partial to none, and an opt-out may be a request rather than an obligation.
How long it lasts
Not indefinitely, in practice. Brokers continuously re-ingest from public records, commercial feeds and each other, so a deleted record can reappear from a source you never dealt with. Suppression lists are the intended remedy and California now requires them — how well that works is something to judge on evidence over the next year or two, not to predict. Why records come back
Plan on re-checking your baseline every few months. That recurring effort is exactly what paid removal services sell.
Doing it yourself vs paying
Manual opt-outs are free and effective per broker, and slow. Doing the top ten from your own search is an evening and usually covers most of what's publicly visible.
Paid services buy breadth and repetition. Whether that's worth it depends on how much is actually published about you — which you can only know by searching first. The decision, and how well they work.
What opt-outs don't reach
Companies you have a direct relationship with aren't brokers — your bank and your retailer don't appear here, and an opt-out unsubscribes you from nothing. That's a separate mechanism. Stopping companies selling your address