โ† Home

Delete my info: using state privacy law deletion requests

Guide ยท Updated October 31, 2026

Asking a company to delete my info used to depend entirely on its goodwill. A growing number of states now give residents a legal right to ask certain businesses to delete personal information, with exceptions.

This guide explains, in general terms, how those requests work and how to make them effective.

How deletion requests generally work

  • Rights depend on your state of residence and on whether the business is covered by that state's law, often based on its size or how much data it handles.
  • Businesses usually must verify your identity before acting, so expect to confirm some details.
  • There are exceptions, for example where the business must keep data for legal reasons or to complete a transaction.
  • Businesses generally have a set period to respond, which may be extended.

If you live in California: the DROP platform

Under California's Delete Act, the California Privacy Protection Agency launched the Delete Request and Opt-out Platform (DROP) in January 2026. California residents can submit one deletion request that goes to the data brokers registered with the state, at no charge from the state.

Registered data brokers were required to begin processing those requests in August 2026 and to check the platform on a recurring schedule. Status updates can take weeks to appear. DROP covers registered data brokers; it does not cover every website, and it does not remove public records at their source.

Residents of other states should check their own state's privacy laws, since several states now give residents rights to request deletion from certain businesses.

Writing the request

Use the business's privacy request form or the method listed in its privacy policy. Say which state you live in, that you are requesting deletion of your personal information, and give only the details needed to find your records. Keep a copy of the request and any confirmation. If the business refuses, ask it to state the reason.

If a business says no or does not answer

  1. Check the response for a stated reason or exception, and ask for one if none was given.
  2. Confirm that you sent the request through the method the privacy policy lists.
  3. Send one polite follow-up that refers to your original request date.
  4. If you still get no answer, look up how to file a complaint with your state attorney general. California also has a dedicated state privacy agency that accepts complaints.

Keep the tone factual throughout. A clear paper trail matters more than strong wording.

Which businesses to start with

Start with companies most likely to share or sell your data, such as data brokers, marketing companies and apps you no longer use. Then move to retailers and services you used once. Companies you still do business with may need some data to serve you, so a deletion request there may close your account.

Verifying your identity without oversharing

Businesses must confirm that a deletion request really comes from you, so expect a verification step. Give the details the business already holds, such as the email address on your account, rather than new information it does not need. Be cautious if a company asks for a full government ID number for a simple request, and ask whether a less sensitive option is available. If you use an authorized agent, the business may ask for proof that you gave permission.

When the page has already changed: Google's outdated content tool

Sometimes the source has already been fixed: a site removed a page, deleted a photo or changed an article, but Google still shows the old title or snippet. Google provides a public "Refresh Outdated Content" request for this situation.

It only works when the live page no longer contains what you are asking about, or no longer exists. It is not a way to remove content that is still on the page. If the source has not changed, the request will normally be declined.

Submit the exact URL, and keep a screenshot of the changed or removed page with the date in your log.

Legal note: this guide is general information, not legal advice. Laws and platform policies change and vary by state. For advice about your situation, consult a licensed attorney in your state.

Getting help

Many of these steps you can take yourself. If you would like someone to look at your situation with you and suggest a plan, you can book a paid consultation. This is a paid consultation: price confirmed when scheduling. No payment is taken on this site. We do not guarantee that any review, article, listing or search result will be removed.

Book a paid consultation

Compliance standards

This site is run by Monaxion. These are Monaxion's company compliance standards.

๐Ÿ›ก๏ธ HIPAA ready posture

Monaxion is built with healthcare-grade controls and signs BAAs where required.

๐Ÿ”’ SOC 2 compliant

Monaxion is SOC 2 compliant.

๐ŸŒ GDPR & CCPA/CPRA

Monaxion complies with GDPR, CCPA/CPRA and other applicable state privacy laws.

Three top AIs. One secure management layer.

Monaxion uses and integrates leading AI models (Grok, OpenAI and Claude) through an AI management layer that routes each task and cross-checks the output.

Grok

xAI's model, used by the management layer when it is the best fit for a task.

OpenAI

OpenAI's models, routed in for the jobs they handle best.

Claude

Anthropic's model, used where its strengths fit the work.

Routing & cross-checks

Each task goes to the best-suited model, and outputs are checked before they reach you.

A person in the loop

Nothing is sent, filed or published on your behalf without your approval.

Ask us a question

Tell us who you are and we will follow up, then you can pick a time. Please do not include confidential, patient or case details in this form.