Once a company has your address, you largely can't stop them sharing it — but opting out has one specific legal effect worth knowing. Under US law, once you've unsubscribed from a sender's marketing, they may not sell or transfer your address, even as part of a mailing list. That's real and useful. What it can't do is reach the parties they shared it with beforehand, which is why the durable answer is controlling which address you hand over next.
What the law actually gives you
The FTC's CAN-SPAM guidance states it directly: once someone has told a sender they don't want more messages, the sender "can't sell or transfer their email addresses, even in the form of a mailing list." The only exception is transferring the address to a company hired to help them comply. Source: FTC, CAN-SPAM Act: A Compliance Guide for Business. Checked: 2026-08-19.
So unsubscribing isn't only about stopping that sender's mail — it takes you out of their onward-sharing pipeline as well. That's a stronger effect than most people realise, and a good reason to unsubscribe properly from companies you recognise rather than just filtering them.
In the EU and UK, the GDPR goes further: you have a right to object to direct marketing and a right to erasure, both enforceable through your national data protection authority.
The three limits
- It's not retroactive. Anyone they shared your address with before you opted out still has it, and your opt-out never reached them.
- It covers marketing, not all data flows. Sharing with processors, analytics providers and partners under other legal bases isn't what this addresses.
- It relies on compliance. A company already ignoring the law isn't going to honour a suppression obligation. Escalation path
Reducing what you hand over
Prevention is where the leverage is, because the sharing you're trying to stop is mostly lawful and mostly disclosed.
- Un-tick "share with carefully selected partners" at signup. This is the specific consent that authorises onward sale — declining it is far easier than undoing it.
- Read what loyalty schemes trade. The discount is payment for data. That's the deal, and it's usually stated.
- Fill in required fields only. A bare address is worth little; an address with a birthday, postcode and purchase history is a segmented record worth reselling. The signup routine
- Give each company a different address. This is the one that changes the economics — see below.
Why a per-company address undercuts the sale
Email is the data industry's preferred join key: stable, unique, and usable to match your records across unrelated datasets. That matching is what makes a list valuable. Why email specifically
An address only one company holds matches nothing else. It can still be sold, but what's sold is a fragment that can't be joined to anything — worth substantially less. And when the buyer uses it, the address tells you exactly who sold it, and you switch it off.
You haven't prevented the sale. You've made it cheap for them and harmless for you, which in practice is the achievable version of the goal.
What about getting it deleted?
Different mechanism. Removal targets records third parties already hold, and it's the right tool if your details are published on people-search sites — but it doesn't stop future sharing and doesn't touch companies you deal with directly. Removal vs prevention, and California's free route if you're eligible.
More: data brokers explained · the complete guide to email privacy