What to Do When a Data Broker Ignores Your Opt-Out Request

You submitted an opt-out request to a data broker weeks ago. Maybe months. And your personal information is still on their site. This happens more often than it should. Some data brokers have intentionally cumbersome removal processes, broken forms, or simply ignore requests they're legally required to honor. Here's exactly what to do when a data broker won't remove your information.

Why Data Brokers Ignore Opt-Out Requests

Before escalating, it helps to understand why your request may not have been processed:

• Intentionally difficult processes: Some brokers design their opt-out forms to be confusing, require multiple steps, or use "glitchy" interfaces that fail to submit properly
• Verification failures: Many brokers send confirmation emails that land in spam folders. If you didn't click the verification link, your request was never finalized
• Processing backlogs: Some brokers claim processing times of 30-45 days, and may be slow to act
• Re-collection of data: Your data may have been removed and then re-added from a different source. The broker technically honored your request but then re-acquired your information
• Deliberate non-compliance: Some brokers simply don't honor removal requests, betting that most people won't follow up

Step 1: Document Everything

Before escalating, build a clear record of your opt-out attempts:

• Screenshot the broker's listing showing your personal information is still present
• Save copies of your original opt-out request with dates and any confirmation numbers
• Screenshot any confirmation emails you received and clicked
• Note the dates of every attempt and any responses (or lack thereof)
• Check the broker's stated processing time and note whether it has expired

This documentation is essential for every escalation step that follows.

Step 2: Send a Follow-Up Citing the Specific Law

Send a formal follow-up email directly to the broker. Include:

• The date of your original request
• Your full name and identifying details from their listing
• The specific state privacy law that applies to you
• The legal response deadline they've exceeded
• A clear statement that you will escalate to regulators if they don't comply

This step alone resolves approximately 40% of delayed responses. Many brokers have compliance teams that take action when they see a legally informed request.

Key Laws and Their Deadlines

• California (CCPA/CPRA): 45 days to respond, with one 45-day extension
• Virginia (VCDPA): 45 days to respond, with one 45-day extension
• Colorado (CPA): 45 days to respond, with one 45-day extension
• Connecticut (CTDPA): 45 days to respond, with one 45-day extension
• Texas (TDPSA): 45 days to respond, with one 45-day extension

Step 3: File a Complaint With Your State Attorney General

If the broker doesn't respond to your follow-up within 15 business days, it's time to escalate to your state's attorney general. Every state AG has a consumer complaint form, and for privacy violations, this is often the most effective escalation.

Data brokers take AG complaints seriously because they can trigger formal investigations. When filing:

• Include all documentation from Step 1
• Specify the law being violated and the timeline of non-compliance
• Clearly state what you want: removal of your personal information
• Provide the broker's name, website, and contact information

State-Specific Complaint Options

• California: File with the California Privacy Protection Agency (CPPA) at cppa.ca.gov. The CPPA has active enforcement authority and has issued fines to non-compliant brokers.
• California (DROP platform): If you're a California resident, you can also use the DELETE Request and Opt-Out Platform (DROP) to submit a single deletion request to all 500+ registered data brokers. Brokers who fail to act face penalties of $200 per consumer per day.
• FTC: File a complaint at ftc.gov/complaint for deceptive practices if a broker advertises an opt-out process but fails to honor it.

Step 4: File a Complaint With the FTC or CFPB

For specific types of data brokers, federal agencies have enforcement power:

• Credit bureaus and financial data brokers: File with the Consumer Financial Protection Bureau (CFPB) at consumerfinance.gov/complaint. The CFPB has enforcement authority and a strong track record of getting results with financial institutions.
• Background check companies: If a broker provides consumer reports, they must comply with the Fair Credit Reporting Act (FCRA). File with the FTC if they refuse to correct or remove inaccurate information.
• All data brokers: The FTC can act against unfair or deceptive practices under Section 5 of the FTC Act. If a broker promises an opt-out mechanism but doesn't honor it, that's potentially deceptive.

Step 5: Consider Legal Action (Last Resort)

In the most egregious cases, legal action may be necessary:

• Small claims court: Some state privacy laws (like California's) allow private right of action for certain violations. Statutory damages under the CCPA can range from $100 to $750 per consumer per incident.
• Privacy attorney: For persistent violations affecting sensitive information, consult a privacy attorney. Many offer free consultations and may take cases on contingency.
• Class action: If a broker is systematically ignoring opt-out requests, you may be part of a class action. Check classaction.org for existing cases against the broker.

How to Prevent This Problem in the Future

Dealing with non-compliant data brokers is time-consuming and frustrating. Here's how to minimize the problem going forward:

• Keep a removal tracking spreadsheet: Log every opt-out request with the date, confirmation number, and expected processing date. Set calendar reminders to follow up.
• Use a dedicated email address: Create a separate email specifically for data broker opt-outs. This keeps verification emails organized and out of your main inbox.
• Enable Global Privacy Control: Turn on GPC in your browser to automatically signal your opt-out preference to websites going forward.
• Use an automated removal service: Services like PrivacyOn handle the entire opt-out process and automatically follow up when brokers don't comply or re-list your data.

Let PrivacyOn Fight Non-Compliant Brokers for You

The best way to avoid the frustration of ignored opt-out requests is to never deal with them manually in the first place. PrivacyOn automates the entire process across more than 100 data broker sites and continuously monitors for your data reappearing.

When a broker fails to remove your data or re-lists it after removal, PrivacyOn automatically re-submits the request. You get the persistence of a dedicated privacy team without spending hours tracking and following up yourself.

• Automated opt-outs across 100+ data brokers
• 24/7 monitoring with automatic re-submissions
• Dark web monitoring for breach exposure
• Family plans for up to 5 people
• Plans starting at $8.33/month

Stop chasing non-compliant data brokers. Let PrivacyOn handle it for you.