How to Remove Your Personal Information From Data Brokers

By NorwegianSpark Editorial · Published June 1, 2026 — written with AI assistance and reviewed by the NorwegianSpark SA editorial team.

To remove your personal information from data brokers, find the sites that list you, send each one an opt-out or erasure request (using a legal right where you have one), then repeat the check every few months, because brokers re-collect. Three free tools do much of the work in 2026: California's DROP platform sends one deletion request to every registered broker, the UK and EU erasure rights give a one-month deadline, and Google's Results about you tool takes your phone number, address and email out of search results. A paid removal service saves time, not outcome.

Most people do not know that a whole industry exists to compile and sell their details. Data brokers aggregate names, addresses, phone numbers, relatives and purchase history from public records, marketing partners and online activity, then sell the profiles to marketers, people-search sites and anyone who pays. That is why your details appear when someone searches your name, and it is the raw material for targeted scams.

The Free Routes, Ranked by How Much They Cover

The California platform is the biggest change in years. The California Privacy Protection Agency describes DROP as a way for a consumer, through a single verifiable request, to direct every data broker; brokers pay a $6,000 annual registration fee and, since 1 August 2026, must access the platform at least once every 45 days, with limited exceptions. If you are not a Californian, the mechanism does not reach you, but the legal right where you live may do a similar job one company at a time.

How the UK and EU Erasure Rights Work in Practice

The Information Commissioner's Office says an organisation has one calendar month to respond to an erasure request, can take up to two extra months in certain circumstances if it tells you why within the first month, and in most circumstances cannot charge a fee. It can refuse where it must keep the data by law, needs it for legal claims, or holds it for journalism, public-interest tasks or research. Article 12(3) of the GDPR sets the same one-month clock across the EU, extendable by two further months where the complexity and number of requests justify it.

Two practical points. The right attaches to where you live and whose law covers the processing, not to where the broker is based; and naming the right in your request (for example "this is a request for erasure under Article 17 of the GDPR") tends to produce a firmer answer than a generic form. Keep the date you sent it, because the deadline is the leverage if you later complain to a regulator.

What Google Removal Does and Does Not Do

Google's Results about you tool lets you check whether your home address, phone number or email address shows up in search results and request removal. Google is explicit that an approved removal does not mean the information is gone from the internet: the source page stays live, and taking it down there means contacting the site owner. Use it to cut the casual "search my name" exposure, and use broker opt-outs to remove the source.

The Order That Works

• Find yourself first. Search your name, your name with your town, your phone number and your email, and record every site that appears. That list, not the industry's full size, is your work list.
• Start with the sites on page one. A listing nobody sees does less harm than the one at the top.
• Use the formal channel: the site's opt-out form, DROP if you are in California, or a written erasure request citing your legal right.
• Keep a log of each request, date and reference number. You will need it when a listing reappears.
• Run Google's Results about you once the sources are handled, then re-check every few months.

Why Removal Is a Subscription, Not a Task

Removal does not persist. Brokers re-collect continuously from public records, loyalty schemes, app permissions and each other, so a profile removed today can be rebuilt within months. California's 45-day processing cycle exists for exactly that reason. Two consequences follow: a one-off removal is worth doing but is not a solution, and reducing what you emit (fewer forms, fewer app permissions, masked email addresses) matters more over time than removing what already exists.

Doing It Yourself or Paying a Service

The last row is the one people miss: a removal service has to hold the data it is removing, so check its own retention and security policy before signing up. The widest-coverage names in the category are Incogni and DeleteMe, and we have no relationship with either. The option we carry is iolo RemoveMe, a lighter tool from the iolo suite rather than a full standalone service; our MyDataRemoval review looks at one dedicated service in detail. Californians should try DROP before paying anyone, because it reaches every registered broker for free.

What Removal Does Not Fix

Data already sold has already gone, and broker removal is forward-looking. Information circulating because of a breach is a different problem with a different response; see how data ends up on the dark web and what to do after a data breach. In the United States, a credit freeze makes it much harder for anyone to open credit in your name with brokered details, which removal alone cannot do.

Data removal is one layer of protecting your privacy online, alongside a password manager and two-factor authentication. Removal services and the monitoring that sits beside them are compared in our security tool shortlist. General guidance, not legal advice.

Continue in this collection

Best Security Tools

The shortlist across antivirus, VPN and password managers, and the reasoning.

Explore

Live Offers

What is actually discounted right now, rather than what once was.

Explore