Who sells your data, and who ignores the law.

12

Reports to regulators

4

In the last 30 days

7

Sites reported

3

Tips from the public

Regulators decide what to act on, so a report is not a guarantee. We publish documented, factual counts, and a site can ask us for a correction.

1. 1. Keep the proof

   Save a screenshot of the listing with the date, a copy of your opt-out request, and any reply. A regulator acts on dates and records, not on a feeling.

2. 2. Report it to the FTC

   Say which site, what you asked for, when, and that it did not comply or keeps re-listing you.

   reportfraud.ftc.gov

3. 3. Report it to your state attorney general

   Many states have their own privacy and data broker laws, and the attorney general enforces them.

   Find your attorney general

4. 4. If you live in California, use DROP

   The state's Delete Request and Opt-out Platform lets a California resident send one deletion request to every registered data broker, free. You verify your residency first. Registered brokers have had to check it at least every 45 days since August 1, 2026, and a status can take up to 90 days to appear.

   privacy.ca.gov/drop

5. 5. If a California broker ignores you

   The California Privacy Protection Agency, which now goes by CalPrivacy, takes complaints about brokers that ignore a request or are not registered. It does not represent individuals, so keep your proof and your dates.

   cppa.ca.gov/webapplications/complaint

6. 6. If it touches your credit

   A credit-reporting or background-check problem can also go to the Consumer Financial Protection Bureau.

   consumerfinance.gov/complaint

A report is not a guarantee. Regulators decide what to act on. This is general information, not legal advice.