Blog / Data Brokers

Data Brokers

How to Opt Out on Behalf of a Family Member (2026 Guide)

By the RedactZero Team · September 12, 2026 · 9 min read

Can you opt someone else out at all?

Yes, provided the person has authorized you and you can pass the broker's verification step for them. Opt-out forms rarely ask whether you are the listed person. They ask for a listing URL and a way to confirm the request, so the practical barrier is access to the relative's email or phone, not a legal one.

California's Attorney General confirms you may authorize another person to submit a privacy request for you, and that a business may ask the agent for proof of signed permission or ask you to confirm directly. Other states' laws follow similar patterns. What no law allows is filing for an adult who has not agreed to it.

Start by seeing how much of the household is exposed. A free exposure scan lists the brokers most likely to show a US adult, and nothing typed into it is stored. Then work through the people-search opt-out guides together.

What "authorized agent" means under California law

California's privacy regulations define an authorized agent as a natural person or a business entity that a consumer has authorized to act on their behalf. That definition, in Title 11 section 7001, is deliberately broad. A daughter helping her father, a spouse, or a paid removal service all qualify, as long as the authorization is real.

Section 7063 sets the guardrails. A business may require the agent to provide proof that the consumer gave signed permission, and it may require the consumer to verify their identity directly with the business or confirm that they gave permission. Crucially, the regulation states that a business shall not require power of attorney in order for a consumer to use an authorized agent.

If you do hold a power of attorney under the Probate Code, the signed-permission requirement does not apply to you. Our post on filing a CCPA deletion request walks through the request itself.

Four family situations, and what each one needs

The right approach depends on who the listing belongs to, because the verification path and the legal basis differ for each. An elderly parent can sign a one-line permission. A child needs a verified parent. A late relative has no email to confirm from. The table below summarises what works and what to have ready.

How the big brokers treat a request from someone else

Most brokers do not distinguish between you and your agent. They tie the request to a listing URL and confirm it through a channel they choose, which is what actually decides whether a family member's opt-out succeeds. Three patterns cover nearly every site you will meet.

Email confirmation. Spokeo asks for the profile URL and an email address, then sends a link you must click. Its opt-out page states each listing has a unique URL and must be opted out individually, and that requests are processed in 24 to 48 hours. Any inbox you can open will do, so the practical step is having your relative forward the link or sit beside you.

Phone verification. Whitepages places an automated call to the number you enter and reads back a four-digit code shown on screen. There is no path through the standard form without a working number, and the standard opt-out does not remove Premium listings, which are maintained separately.

Shared portal with a phone fallback. Intelius, TruthFinder, Instant Checkmate and US Search all run through PeopleConnect's suppression centre, so one request per person covers all four. Removal guides that track these sites report that cases involving a minor, multiple records, or a court-ordered expungement are routed to a weekday phone line rather than the self-service portal.

What PeopleConnect's own numbers say about denials

PeopleConnect publishes an annual California privacy disclosure, the best public window into how requests fare. For 2025 it reports tens of thousands of deletion requests, with roughly one in five denied in whole or in part. It says denials include occasions when the requestor failed to verify their identity, and that complied requests include third-party ones.

The denial column is driven by verification, not by who typed the form. Use contact details the listed person controls, and have them ready to confirm.

Opting out for an elderly parent

Do it with them, in one sitting, using their own email and phone. That satisfies every verification pattern above, keeps you inside the authorized-agent rules, and avoids the most common failure, which is a confirmation link landing in an inbox nobody checks. A signed, dated note giving you permission covers you if a broker asks.

Where a parent can no longer manage this themselves, a power of attorney is the clean basis. A broker cannot demand one, but if you have it, you do not need separate signed permission. Keep a scan of it with the listing URLs you file, because a listing that returns in a few months will need the same paperwork again.

Decades of property records, phone directories and voter files make older adults the most exposed people in many households. Their listing also publishes your name and city in its relatives block, which is why our post on why relatives appear in people-search results treats this as a household job.

Opting out for a minor child

A parent or guardian can act for a child, and California's regulations require the business to verify that relationship rather than take it on trust. Section 7070 lists acceptable methods, including a consent form signed under penalty of perjury, a video or phone check with trained staff, or matching against government identity databases.

Children appear on people-search sites less often than adults because they generate few public records. When they do, it is usually inside a parent's profile as a relative with an approximate age, so removing the parent's listing removes that exposure. Check the no-paywall sites such as TruePeopleSearch first.

If a child has a standalone listing, expect friction, because self-service forms assume an adult with their own email and phone. Where a broker routes minors to a phone line, call it, state that you are the parent, and note the date.

Removing a deceased relative's listing

There is normally no form option for a person who has died, and standard verification fails once their phone is disconnected and their email closed. What works is a direct email to the broker's privacy address with the profile URL, a copy of the obituary or death certificate, and your role as executor or next of kin.

Spokeo publishes a privacy contact address on its opt-out page, and most large brokers do the same in their privacy policies. Send one request per site, keep the replies, and re-check after 30 days. An obituary itself can generate a fresh listing that names surviving relatives and their cities.

Treat the listing as one part of a wider cleanup. A deceased person's name, date of birth and last address are what identity thieves use to open accounts in their name. Notifying the credit bureaus of the death and reporting any misuse through the FTC's IdentityTheft.gov belong in the same week.

California's DROP: one person per request

DROP is the free, state-run platform that sends one deletion request to every registered California data broker, and it has explicit rules for helpers. Its Terms of Use state that adding personal information about multiple people in the same request is prohibited. You cannot bundle a spouse or parent into your own submission.

You may aid another consumer with their request only if that person has authorized you and you meet the authorized-agent requirements in section 7001(d). The relative must first pass DROP's own California residency check, which runs through the state's Identity Gateway with vendors including Socure and Login.gov. When you help, you or the consumer must disclose your full name, email address, and business name if applicable.

The Terms add that submitting information about a person who has not authorized you is prohibited. Registered brokers must process DROP requests at least every 45 days from August 1, 2026. Our California DROP guide covers the steps.

Where acting for someone else breaks down

Three situations stop you cold: the relative has not consented, the verification channel belongs to someone you cannot reach, or the connection you want removed lives on a profile that is not theirs. Each has a workaround, and none of them is "file it anyway."

No consent. Filing for an adult who has not agreed is impersonation, and DROP's Terms name it as a prohibited use. If the relative is a target of harassment and will not act, work through the safety sequence in our post on data brokers and stalking from your own side instead.

Verification you cannot pass. Whitepages will only call a number, and Spokeo will only email an address. If you cannot reach either, use the broker's privacy email with signed permission attached. Some sites never honour requests at all, which we cover in why you cannot remove yourself from every broker.

The special case of protected families. New Jersey's Daniel's Law lets current and former judges, prosecutors and police officers, along with immediate family living with them, demand that their home address and unpublished phone number be removed, with a 10-day takedown window and a $1,000 penalty per violation. The law is still being litigated, but it is the clearest example of family members holding removal rights of their own.

A practical checklist for doing it together

The fastest version is a single afternoon with the relative present, their phone charged, and a shared list of sites. Work the list in the same order for everyone in the household so no stale profile re-seeds the others, and diary a re-check because listings commonly return within three to six months.

1. Write and sign a one-line permission note, dated, naming you as the person filing. Photograph it.
2. Search each relative's name and note every listing URL, starting with the no-paywall sites that show the most for free.
3. File the shared PeopleConnect portal once per person, then Spokeo, Whitepages and the rest using the verified opt-out guides.
4. Confirm every email link and answer every verification call while you are still together.
5. For California residents, have each person complete their own DROP residency check and request.
6. Save the confirmation emails in one folder, and set a reminder to re-search in 90 days.

Everything above is free. Paid removal services file the same requests as an authorized agent, which is why their sign-up flow asks for your permission. The rest of this series covers when that trade is worth it.

Frequently asked questions

Sources: California Code of Regulations, Title 11, sections 7001, 7063 and 7070 (via Cornell Legal Information Institute); California Attorney General, CCPA FAQ on authorized agents; California Privacy Protection Agency, DROP Terms of Use at consumer.drop.privacy.ca.gov (effective December 5, 2025); Spokeo's opt-out page; PeopleConnect's California Privacy Rights Disclosure covering 2025 requests; DuckDuckGo's Whitepages opt-out help page; The Record (Recorded Future News) and New Jersey Monitor reporting on Daniel's Law; Google Search Help on removing personal information.