Blog / Data Brokers

Data Brokers

Why You Cannot Remove Yourself From Every Data Broker

By the RedactZero Team · September 4, 2026 · 10 min read

What "every broker" would actually require

Removing yourself from every data broker would mean naming each company that holds a record on you, getting each one to delete rather than hide it, and stopping fresh records from arriving. None of those three is fully possible today. Knowing where the walls are lets you spend effort where it counts and stop feeling like you failed.

Most of this site's guides deal with people-search sites, because those are the brokers you can see. They publish a page with your name on it, and that page has a removal form. But the FTC's 2014 study of the industry looked at nine brokers, and only three sold people-search products at all. The FTC did not say which three, though its own descriptions point to Intelius and PeekYou. The others, including Acxiom and CoreLogic, sold marketing and risk data that no consumer ever sees on a web page. The people-search layer is the visible tip.

Ceiling one: you cannot opt out of a broker you cannot name

The largest gap is invisibility. Most brokers never publish a profile page, so there is nothing to search for and no listing URL to submit. The FTC found that seven of the nine brokers in its study supplied data to each other, which it said made it "virtually impossible" for a consumer to work out where a record came from.

The scale is the problem. In that same report, one broker held 3,000 data segments on nearly every US consumer, another's database covered 1.4 billion consumer transactions and more than 700 billion data elements, and a third added three billion new records every month. None of those companies has a page you can find yourself on.

State registries help but do not close the gap. California's registered broker count passed 575 by February 2026, up from 459 the previous June, according to figures the California Privacy Protection Agency presented at its board meeting. Registration is self-reported, and the penalty for skipping it is $200 a day. A broker that has not registered is simply absent from the list, and you have no way to know it exists. We covered the counting problem in how many data brokers have your information.

Ceiling two: public records have no opt-out

Court dockets, property deeds, and voter rolls are public by law, and no broker can be made to forget what the government publishes. Spokeo's privacy policy says it does not let people suppress court records about themselves unless they provide a court order of expunction or sealing. Other sites follow the same logic, whether or not they say so.

Federal court records on PACER are public by design. The judiciary's privacy policy redacts only five identifiers from filings: Social Security numbers, names of minor children, financial account numbers, dates of birth, and home addresses in criminal cases. Your name, the case, and everything else in the document remain open.

State law is often broader. Florida's public records statute opens all state, county, and municipal records to personal inspection and copying by any person. Voter lists vary by state, and the National Conference of State Legislatures notes that who can request them differs widely. Florida's list is available to the public, Ohio's is open to public inspection at all times, and in Texas any person may request it. There is no form that removes you from those files, only a court order in the narrow case of sealed or expunged records.

Ceiling three: regulated files you can dispute but not delete

Credit bureaus and risk-data companies operate under the Fair Credit Reporting Act, which gives you a right to dispute errors, not a right to delete accurate history. The Consumer Financial Protection Bureau states that you generally cannot have accurate negative information removed, and that anyone claiming they can is probably running a credit repair scam.

What you can do is limit use. A credit freeze at all the bureaus stops new accounts being opened in your name. The joint prescreen opt-out at optoutprescreen.com, or 1-888-5-OPT-OUT, removes you from firm-offer lists for five years, or permanently if you mail the signed form, per the FTC. Neither deletes a byte of your file.

Risk-data brokers are stricter still. LexisNexis publishes a suppression policy that covers public and elected officials, law-enforcement officers, people facing a substantial risk of physical harm, and identity-theft victims, each with supporting documents such as a police report or a supervisor's letter. It says plainly that it does not suppress information from products sold to law enforcement or regulated by the FCRA. Everyone else gets the state-law route, where one exists. See our LexisNexis guide and Equifax guide for the exact steps that do work.

Ceiling four: opt-outs gated by ID uploads or state lines

Some removal forms exist on paper but ask for things a cautious person should not hand over. The FTC found one people-search broker in its study required a copy of your driver's license by mail, fax, or upload, and Consumer Reports later noted that some sites demand an account or a license number, which its testers declined to provide. Other sites reserve their strongest deletion route for residents of states with privacy laws.

Our own verified guides show the pattern. SearchQuarry lists statutory privacy rights for residents of 19 named states. TruthFinder, PeopleLooker, and StateRecords offer a legal deletion route with deadlines to residents of California, Colorado, Connecticut, Utah, and Virginia, and a voluntary suppression with no deadline to everyone else. CyberBackgroundChecks labels its removal path "ccparemoval", and one guide reports it may only accept California residents.

If your state has no comprehensive privacy law, you are relying on the broker's goodwill. Most honor requests anyway, but nothing forces them to, and nothing sets a clock. Our state-by-state rights guide shows which route you can invoke.

Ceiling five: suppression is a flag, and new data walks past it

Even a successful opt-out is a flag on one record, not a deletion of you. Spokeo explains its own system this way: it places a permanent flag on the listing you removed, but a new record with a new address, or a typo in your name, looks like a different person to the software and is published as a new listing.

The brokers told the FTC as much. In the 2014 study, the three people-search companies said they do not offer deletion because it would be futile: they refresh their data by automated web crawling, so the same or similar information would reappear in their databases anyway. The FTC also warned that an opt-out filed with details that differ from a broker's records may miss some of them, so you may have to file several times with the same site.

Marketing brokers add a second limit. Acxiom's opt-out page states that the request is not effective for data already provided to marketers before you filed it. Whatever was sold last quarter stays sold. That is why people-search listings commonly reappear within three to six months, and why the relisting cycle is a feature of the industry rather than a broken form.

What the only independent test says about a realistic result

The best public measure of the ceiling is Consumer Reports' 2024 "Data Defense" study, which tracked 32 volunteers across 13 people-search sites for four months. Manual opt-outs cleared about 70 percent of the profiles in the test, while seven paid services together removed 35 percent, with the best at 68 percent and the worst at 4.

Two caveats matter. Consumer Reports did not test whether removed profiles came back later, so it says nothing about relisting. And it noted that no federal law gives consumers a right to opt out of people-search sites at all. Even the best number in that table is a snapshot of a voluntary process. Our review of paid removal services goes through what you get for the money.

What California's DROP fixes, and what it leaves

DROP is the closest thing to a universal off switch, and it still has a ceiling. One request reaches every broker registered with California, and from August 1, 2026 brokers must check the platform at least every 45 days and process what they find. It only works for California residents and only covers brokers that registered.

The exemptions are written into the statute. California's definition of a data broker excludes companies to the extent they are covered by the FCRA, the Gramm-Leach-Bliley Act, the state insurance privacy law, and health privacy law. The CPPA's own DROP design lets a broker answer a request with "Exempted" or "Record not found". So a Californian who files once still has credit files, bank data, and unregistered brokers outside the net. Our California DROP guide and Delete Act explainer cover what is inside it.

Where to spend your effort instead

Since zero is off the table, aim at the listings that do the most damage: sites that show your address for free, sites ranking on the first page for your name, and the bureau files that feed fraud. That covers most of what a stranger, scammer, or ex would actually find in ten minutes.

• The no-paywall sites first. TruePeopleSearch, FastPeopleSearch, ThatsThem, SearchPeopleFree, and CyberBackgroundChecks show full results with no account and no charge, which makes them more exposing than subscription sites. Our people-search opt-out hub lists each one.
• The shared portals. Intelius, TruthFinder, Instant Checkmate, and US Search are all PeopleConnect brands with one suppression portal, so one request covers four sites.
• The awkward ones. Whitepages requires an automated verification call, and its standard opt-out does not touch Premium listings. Follow the Whitepages guide step by step.
• The financial layer. Freeze your credit and file the prescreen opt-out. You are not deleting anything, but you are closing the doors that matter.

To build the target list without searching forty sites by hand, RedactZero's free exposure scan lists the brokers likely to hold a listing on a US adult, plus any breaches tied to your email, and nothing you enter is stored. The full opt-out directory and the step-by-step guides take it from there.

A maintenance routine that respects the ceiling

Treat removal like weeding: a short pass every quarter beats one heroic weekend. Re-search your name plus city, re-open the exact listing URLs you removed, re-file anything that came back, and repeat after any move, new phone number, or property purchase, because those events create the fresh records that walk past old suppression flags.

If you would rather not run that loop yourself, RedactZero's optional monthly re-check emails you only when new exposure appears, so the quarterly pass turns into reading one message. Either way, the finish line is not zero. It is a footprint small enough that finding you takes real work rather than one free search, and that is a goal you can actually reach and keep.

Frequently asked questions

Sources: FTC, "Data Brokers: A Call for Transparency and Accountability" (May 2014); Consumer Reports, "Data Defense: Evaluating People-Search Site Removal Services" (August 8, 2024); Consumer Financial Protection Bureau, Ask CFPB on removing accurate negative information; FTC consumer advice on prescreened credit and insurance offers; PACER FAQ and the US Courts privacy policy for electronic case files; National Conference of State Legislatures, access to and use of voter registration lists (June 2026); Florida Statutes section 119.01; California Civil Code section 1798.99.80, the CPPA FAQ and its November 2025 DROP board materials; IAPP reporting on the February 2026 CalPrivacy board meeting (registered broker counts); Spokeo's privacy policy (June 2026) and its opt-out explainer; Acxiom's opt-out page; LexisNexis consumer and data access policies; RedactZero's verified opt-out guides for the state-residency and ID requirements named above.