Have you ever wondered why you get ads for things you only mentioned in passing, or why your mailbox overflows with offers that seem oddly specific? You’re not imagining things. Behind the scenes, data brokers are quietly building detailed profiles on you—tracking your purchases, your movements, even details from public records. They sell this information to anyone willing to pay, from advertisers to insurance companies to, sometimes, far less scrupulous buyers. Until recently, most people had little control over this hidden trade in their personal data. But a new law in California—the Delete Act—has started to change the game, giving ordinary people a way to reclaim some privacy. Still, understanding what data brokers know, how they operate, and how you can remove your information is crucial for anyone who values their privacy, not just Californians.
What Are Data Brokers, and Why Should You Care?
Data brokers are companies whose entire business is collecting, organizing, and selling information about people. They don’t just scrape public records; they buy, trade, and aggregate data from credit card transactions, app usage, social media, loyalty programs, and more. If you use a smartphone, shop online, or have a social media account, chances are you’re in dozens—if not hundreds—of data broker databases.
Why does this matter? Because these profiles can be shockingly detailed. They can include your home address, age, family members, income bracket, online searches, purchase history, and even your real-time location data. This information is bought and sold for targeted advertising, but also for things like credit scoring, insurance risk assessments, and sometimes, identity theft. The result: your everyday actions quietly fuel a marketplace you never signed up for, and you have little idea who’s buying or using your data.
Who Are the Major Data Brokers, and What Do They Know About You?
There are hundreds of data brokers in the United States alone, ranging from household names to obscure outfits you’ve never heard of. Some of the largest include Acxiom, Experian, CoreLogic, Epsilon, and Oracle Data Cloud. But there are also hundreds of smaller companies that specialize in niche data—like voter records, health-related purchases, or geolocation data from your phone.
What do they know? Here’s a quick breakdown:
- Purchase history: What you buy, where, and how often.
- Location data: Where you live, work, shop, and travel—sometimes in real time, thanks to mobile apps.
- Public records: Property ownership, court records, marriage and divorce records, and more.
- Online activity: Websites you visit, things you search for, and even social media likes or follows.
- Demographics: Age, gender, ethnicity, family size, education, estimated income.
Most of this information is collected without your explicit consent, bundled with data from other sources, and sold in bulk. Data brokers rarely interact directly with consumers, so you may not even know your data is being bought and sold.
Why Millions of Users Never Realize Their Data Was Exposed
Unlike data breaches that make headlines, the data broker industry operates quietly, rarely notifying people when their information is collected or sold. There’s no pop-up, no email, no warning. You might notice more spam calls, targeted ads, or even suspicious activity in your accounts, but connecting those annoyances back to data brokers isn’t easy.
For most people, the impact is subtle but constant. You might get denied for a loan based on outdated or inaccurate broker data. Or maybe you receive health-related ads that feel invasive. Some people discover their home address, family details, or even sensitive information like medical conditions listed on websites that buy brokered data. It’s not always dramatic, but it’s a persistent erosion of privacy.
Common Misconceptions About Data Broker Opt-Outs
Many people believe that if they request data removal from a broker, their information is gone for good. Unfortunately, that’s not how it works in most cases. Here are some myths worth busting:
- "All brokers must delete your data if you ask." Only brokers registered in certain states, like California, are required to comply with deletion requests—and even then, only if you use the right process.
- "One request removes you everywhere." Before California’s new law, you had to contact each broker individually, which could mean filling out dozens or even hundreds of forms.
- "Once deleted, always deleted." Brokers can reacquire your data from new sources unless you keep opting out or deleting periodically.
- "Opting out is instant." Deletion requests can take weeks or months to process, and some brokers may drag their feet or claim exceptions.
This confusion is no accident. The industry has little incentive to make opting out easy, and some brokers have been caught making the process intentionally difficult or misleading.
The California DELETE Act: What Changed in 2026?
Until recently, fighting data brokers meant going broker by broker, filling out forms, sending emails, and sometimes even mailing letters. It was exhausting and often ineffective. The California Delete Act, signed into law in 2023 and fully implemented in 2026, changed this by creating the Delete Request and Opt-out Platform (DROP).
DROP is a secure, centralized website where California residents can submit a single request to delete their personal data from over 600 registered data brokers. Starting August 1, 2026, brokers are required to process these requests at least once every 45 days. This is a huge leap forward: it means you no longer have to hunt down each broker individually. The process is free, and you can track the status of your requests through the platform.
While DROP is currently only available to Californians, similar laws are being considered in other states. If you’re not in California, it’s worth keeping an eye on developments in your own state, as these protections may expand in the coming years.
What Does the DROP Platform Actually Do?
DROP acts as your one-stop privacy control center for registered data brokers in California. Here’s how it works in practice:
- You create an account on the DROP platform (run by the California Privacy Protection Agency).
- You verify your identity securely—this step is crucial to prevent fraud.
- You submit a deletion request, which is automatically sent to all registered data brokers.
- Brokers are required by law to process your request within 45 days, either deleting your data or opting you out of future sales.
- You can log back in to check the status of your requests and see which brokers have complied.
There are no fees. If a broker fails to comply, you can report them through the platform, and the state can investigate or penalize repeat offenders.
It’s important to note that not every data broker is covered—only those registered in California. And if you move or create new public records, your data could reappear, so it’s wise to revisit DROP every year or so.
Five Steps That Actually Reduce Your Risk
Whether you live in California or not, you can take practical steps to limit what data brokers collect and sell about you. Here’s what actually works:
- Use DROP if you’re eligible. If you’re a California resident, use the platform. It’s the most effective, centralized way to remove your info from hundreds of brokers.
- Opt out directly with major brokers. If you’re outside California, you can still request deletion from big brokers like Acxiom, Experian, and Oracle. It’s tedious, but every bit helps.
- Limit data sharing in apps and online accounts. Review your privacy settings. Turn off location tracking where possible and avoid unnecessary permissions in apps.
- Be cautious with loyalty programs and online forms. Many retailers and websites sell your info to brokers. Give out only what’s necessary.
- Monitor your digital footprint. Google yourself periodically. If you find your info on broker-powered people-search sites, request removal using their opt-out forms or contact support.
These steps won’t make you invisible, but they’ll reduce your profile’s value to brokers and cut down on unwanted marketing, spam, and risk of misuse.
Real-World Impact: What Happens After You Use DROP?
People who’ve used the DROP platform report noticeable changes. One California resident deleted their data from over 600 brokers in a single afternoon. Within weeks, they noticed a sharp drop in spam emails and fewer targeted ads. Another person found that their home address and phone number disappeared from several people-search sites, making them less vulnerable to scams and unwanted contact.
It’s not just about fewer ads. By removing your data from broker lists, you reduce the risk of identity theft, minimize the chance of being targeted by social engineering scams, and regain a bit of control over your digital life. The psychological relief—less anxiety about who knows what about you—is real.
What About the Rest of the Country?
If you’re not in California, you don’t have access to DROP yet. But you’re not powerless. Some states are considering similar laws. In the meantime, you can:
- Use free opt-out tools from privacy advocacy groups (they’ll walk you through the process for major brokers).
- Contact major brokers directly using their published opt-out forms (yes, it’s a hassle, but it works if you stick with it).
- Support privacy legislation in your state. The more people speak up, the faster these protections will spread.
Remember, data brokers operate nationwide. Even if you’re not covered by California’s law, your data is still being collected and sold. Taking action now can make a difference in how much of your information is out there.
Looking Ahead: The Broader Implications of the DELETE Act
The DELETE Act and DROP platform mark a major shift in how Americans can protect their personal data. It’s the first time a state has forced the data broker industry to give consumers real control. If it works well in California, other states will likely follow, and companies will have to rethink how they handle personal data nationwide.
But don’t expect the industry to give up easily. Data brokers have a lot to lose, and they will look for loopholes, delay tactics, or new ways to collect information. Staying informed and using the tools available is your best defense.
For now, Californians have a powerful new way to opt out of the data broker economy. For everyone else, the tide is turning—slowly, but in the right direction. Take advantage of what’s available, support privacy initiatives, and remember: your data is valuable, but so is your right to control it.
