Files
dre/compliance/data-broker-removal-action-plan.md
T
2026-07-15 17:32:00 -04:00

386 lines
22 KiB
Markdown
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
# Data Broker Removal Action Plan
## For: Germaine Brown — Savannah, GA Area
**Compiled:** July 2026
---
## Table of Contents
1. [Executive Summary](#1-executive-summary)
2. [What Info Is Out There & Why It Matters](#2-what-info-is-out-there--why-it-matters)
3. [Manual vs Paid Service: Decision Guide](#3-manual-vs-paid-service-decision-guide)
4. [Paid Service Comparison](#4-paid-service-comparison)
5. [Prioritized Opt-Out List (50 Sites)](#5-prioritized-opt-out-list-50-sites)
6. [Step-by-Step Manual Process](#6-step-by-step-manual-process)
7. [Breach Database Check](#7-breach-database-check)
8. [Maintenance & Recurrence Schedule](#8-maintenance--recurrence-schedule)
9. [Tracking Template](#9-tracking-template)
---
## 1. Executive Summary
**Recommendation: Use a paid service ($84$129/yr) for the first cleanup, then monitor manually.**
| Approach | Year 1 Cost | Time Required | Effectiveness |
|----------|------------|----------------|---------------|
| Manual DIY | $0 | ~1220 hours initial + 24 hr/month | Medium (easy to miss sites or give up partway) |
| Paid Service | $84$129/yr | ~24 hours initial setup + 01 hr/month | High (covers 30200+ sites systematically) |
| Hybrid (service + manual follow-up) | $84$129/yr | ~2 hours setup + 1 hr/month | Highest |
**Why paid is worth it:** Data *respawns*. Sites re-add you from other databases, public records, or shared data. A good service continuously re-scans and re-submits removals. Manual-only approaches typically fizzle after the first batch.
---
## 2. What Info Is Out There & Why It Matters
### What data brokers index about you
| Data Point | Where It Comes From | Risk if Exposed |
|------------|-------------------|-----------------|
| Full name + address | Property records, voter registration, utility bills | Doxxing, physical mail scams |
| Phone numbers | Reverse phone lookups, marketing databases | Spam calls, SIM swaps, phishing |
| Email addresses | Data breaches, account registrations, marketing lists | Targeted phishing, account takeovers |
| Date of birth | Public records, voter rolls | Identity theft, credential stuffing |
| Relatives & associates | Family tree sites, obituaries, social connections | Social engineering targeting family |
| Criminal/legal history | Court records (if any) | Reputational harm |
| Property ownership | County assessor records | Targeted burglary, scams |
| Past addresses | Credit headers, rental history | Identity verification bypass |
### Why Savannah, GA residents should care
- Georgia has **moderate** data privacy laws (no comprehensive CCPA-like law at state level as of 2026 — though GA's data breach notification law is strong)
- No state-level "right to delete" for all data brokers (unlike CA, VA, CO, CT)
- You rely on federal protections (FTC) and individual broker opt-out policies
- Public records (Chatham County property, voter rolls) are easily accessible online
---
## 3. Manual vs Paid Service: Decision Guide
### Choose MANUAL if:
- You have 12+ hours to dedicate this month
- You enjoy process-oriented tasks and keeping spreadsheets
- You are willing to re-check and re-opt-out every 23 months forever
- Budget is zero (can't spare even $84/year)
- You want full control over what gets removed (and want to keep some public presence)
### Choose PAID SERVICE if:
- Your time is worth more than ~$10/hour
- You want the job done right the first time
- You want continuous monitoring (data respawns constantly)
- You find the process overwhelming or tedious
- You want coverage of 50200+ sites automatically (vs. 3050 manually)
- You have ever been the victim of identity theft, stalking, or doxxing
### Best Value Pick: **Kanary** ($84/yr) — good balance of price, coverage, and continuous monitoring
### Best Premium Pick: **DeleteMe** ($129/yr) — most established, best customer support, most thorough opt-out documentation
### Best Budget Pick: **PrivacyDuck** ($60/yr) — cheaper but covers fewer sites
### Best Mid-Range Pick: **Incogni** ($90/yr) — legal-framework-based approach, good automation
---
## 4. Paid Service Comparison
| Feature | **DeleteMe** | **Kanary** | **OneRep** | **Incogni** | **PrivacyDuck** |
|---------|-------------|-----------|-----------|------------|----------------|
| **Price** | $129/yr ($10.75/mo) | $84/yr ($7/mo) or $14/mo | $120/yr ($10/mo) — or $9/mo annual | $90/yr ($7.49/mo) — or $12.99/mo | $60/yr ($5/mo) |
| **Sites Covered** | ~3040 core + 200+ total | ~2535 core + 100+ total | ~1020 core | ~2530 core | ~1520 core |
| **Opt-Out Cadence** | Quarterly removal sweeps | Continuous monitoring + monthly reports | Weekly scans | Quarterly sweeps | Monthly |
| **Human Support** | Excellent (dedicated team) | Good (email support) | Limited (chat/email) | Limited (email only) | Limited (email) |
| **Report Dashboard** | Yes — detailed | Yes — clean dashboard | Yes — basic | Yes — simple | Yes — basic |
| **Removal Proof** | Screenshot verification | Confirmation tracking | Confirmation tracking | Confirmation tracking | Tracking |
| **Free Scan** | Yes (scan only) | Yes (scan only) | Yes (scan only) | Yes (scan only) | Yes (scan only) |
| **Continuous Re-scan** | Yes (quarterly) | Yes (monthly) | Yes (weekly) | Yes (quarterly) | Yes (monthly) |
| **Known Limitations** | Expensive; slow removals for some brokers | Smaller broker network than DeleteMe | History of poor privacy practices (CEO controversies) | Removal requests via legal framework can be slower | Very limited broker coverage |
| **Refund Policy** | 30-day money-back | 30-day money-back | 30-day money-back | 30-day money-back | 30-day money-back |
| **Best For** | Comprehensive, premium, peace of mind | Best value; good balance | Budget-conscious, simple needs | Privacy-focused, automation | Absolute cheapest option |
### ⚠️ Important Note on OneRep
OneRep has faced significant controversies:
- The CEO was previously involved with data broker operations (conflict of interest)
- Privacy researchers have flagged their data-sharing practices
- They are generally **not recommended** by privacy advocates
- **Stick with DeleteMe, Kanary, or Incogni**
### How the services work
1. You provide the name, location, email, phone, DOB to be scrubbed
2. The service scans data broker sites for your info
3. They submit opt-out/removal requests on your behalf (usually within 17 days)
4. They send you a dashboard showing removal status for each site
5. They re-scan periodically and re-submit removal requests when data respawns
6. You can optionally add new info (new address, new email) as needed
---
## 5. Prioritized Opt-Out List (50 Sites)
### PRIORITY 1 — The "Big 10" (Start Here)
These sites feed data to hundreds of smaller sites. Removing from these cascades removals downstream.
| # | Site | Opt-Out Link | Free? | Requires ID? | Removal Time | Notes |
|---|------|-------------|-------|-------------|-------------|-------|
| 1 | **Spokeo** | https://www.spokeo.com/opt-out | ✅ Free | Email verification | 2448 hrs | One of the biggest; feeds many others |
| 2 | **Whitepages** | https://www.whitepages.com/suppression_requests | ✅ Free | Phone/email verification | 2448 hrs | Premium listing removal separate |
| 3 | **Intelius** | https://www.intelius.com/opt-out | ✅ Free | Email verification | 37 days | Owned by PeopleConnect (same co. as BeenVerified, TruthFinder) |
| 4 | **BeenVerified** | https://www.beenverified.com/opt-out | ✅ Free | Email verification | 2448 hrs | Parent: PeopleConnect |
| 5 | **TruthFinder** | https://www.truthfinder.com/opt-out | ✅ Free | Email link | 2448 hrs | Parent: PeopleConnect |
| 6 | **PeopleFinders** | https://www.peoplefinders.com/opt-out | ✅ Free | Email verification | 37 days | Owned by PeekYou |
| 7 | **Radaris** | https://radaris.com/page/how-to-opt-out | ✅ Free | Email link + CAPTCHA | 2472 hrs | Aggressive re-add; check monthly |
| 8 | **MyLife** | https://www.mylife.com/optout | ✅ Free | Email + sometimes ID | 714 days | Requires account creation; pushy upselling |
| 9 | **Nuwber** | https://nuwber.com/removal | ✅ Free | Email confirmation | 2448 hrs | Clean removal process |
| 10 | **PeekYou** | https://www.peekyou.com/optout | ✅ Free | Email verification | 2472 hrs | Feeds PeopleFinders |
### PRIORITY 2 — High-Traffic People Search Sites
| # | Site | Opt-Out Link | Free? | Notes |
|---|------|-------------|-------|-------|
| 11 | **USSearch** | https://www.ussearch.com/opt-out | ✅ Free | Owned by PeopleConnect |
| 12 | **ZabaSearch** | https://www.zabasearch.com/opt-out | ✅ Free | Simple removal |
| 13 | **CheckPeople** | https://checkpeople.com/opt-out | ✅ Free | Email verification |
| 14 | **GoLookUp** | https://www.golookup.com/opt-out | ✅ Free | Email verification |
| 15 | **PublicRecords** | https://www.publicrecords.com/opt-out | ✅ Free | Email verification |
| 16 | **FamilyTreeNow** | https://www.familytreenow.com/opt-out | ✅ Free | Email verification; also genealogy |
| 17 | **Cubib** | https://cubib.com/opt-out | ✅ Free | Email link |
| 18 | **PeopleLooker** | https://peoplelooker.com/opt-out | ✅ Free | Parent: PeopleConnect |
| 19 | **InstantCheckmate** | https://www.instantcheckmate.com/opt-out | ✅ Free | Parent: PeopleConnect |
| 20 | **SearchPeopleFree** | https://www.searchpeoplefree.com/opt-out | ✅ Free | Email verification |
| 21 | **PrivateEye** | https://www.privateeye.com/opt-out | ✅ Free | Email verification |
| 22 | **IDtrue** | https://www.idtrue.com/opt-out | ✅ Free | Email verification |
| 23 | **ThatsThem** | https://thatsthem.com/opt-out | ✅ Free | Has rate-limiting |
| 24 | **PeopleSearchNow** | https://www.peoplesearchnow.com/opt-out | ✅ Free | Email verification |
| 25 | **Addresses.com** | https://www.addresses.com/opt-out | ✅ Free | Email verification |
| 26 | **Phonebooks.com** | https://www.phonebooks.com/opt-out | ✅ Free | Email verification |
| 27 | **ThePublicRecords** | https://thepublicrecords.com/opt-out | ✅ Free | Email verification |
| 28 | **FreePeopleFinder** | https://www.freepeoplefinder.com/opt-out | ✅ Free | Email verification |
| 29 | **PeopleSmart** | https://www.peoplesmart.com/opt-out | ✅ Free | Parent: Reputation.com |
| 30 | **AdvancedBackgroundCheck** | https://advancedbackgroundcheck.com/opt-out | ✅ Free | Email verification |
### PRIORITY 3 — Background Check & Public Record Sites
| # | Site | Opt-Out Link | Free? | Notes |
|---|------|-------------|-------|-------|
| 31 | **Checkr** | https://checkr.com/consumers/opt-out | ✅ Free | Consumer reporting agency |
| 32 | **GoodHire** | https://www.goodhire.com/consumers/opt-out | ✅ Free | Consumer reporting agency |
| 33 | **HireRight** | https://www.hireright.com/privacy-center/opt-out | ✅ Free | Consumer reporting agency |
| 34 | **Certn** | https://certn.co/us/consumer-opt-out/ | ✅ Free | Canadian-based, used in US |
| 35 | **AccurateNow** | https://accuratenow.com/consumer-center/ | ✅ Free | Consumer reporting agency |
| 36 | **ConsumerCheck** | https://consumercheck.com/opt-out | ✅ Free | Background check |
| 37 | **VoterRecords** | https://voterrecords.com/opt-out | ✅ Free | Voter registration data |
| 38 | **VineLink** | https://vinelink.com/faq | N/A | Inmate/offender info — cannot remove if public record |
| 39 | **County Public Records** | Check local county site (Chatham Co.) | Varies | Must contact county assessor/court directly |
| 40 | **Georgia MyVoterPage** | https://mvp.sos.ga.gov/ | N/A | Voter registration — can only be suppressed in some cases |
### PRIORITY 4 — Marketing Data Brokers & People Aggregators
These are harder to opt out from but worth doing.
| # | Site | Opt-Out Link | Free? | Notes |
|---|------|-------------|-------|-------|
| 41 | **Acxiom** | https://isapps.acxiom.com/optout/optout.aspx | ✅ Free | One of the world's largest; opt-out reduces cross-contamination |
| 42 | **Epsilon/Conversant** | https://www.epsilon.com/privacy-policy | ✅ Free | Marketing data broker |
| 43 | **Oracle Data Cloud** | https://www.oracle.com/legal/privacy/marketing-cloud-data-cloud-privacy-rights.html | ✅ Free | Massive data aggregator |
| 44 | **Experian** | https://www.experian.com/consumer/optout.html | ✅ Free | Credit bureau — also sells marketing data |
| 45 | **TransUnion** | https://www.transunion.com/consumer-request | ✅ Free | Credit bureau — offers opt-out from marketing lists |
| 46 | **Equifax** | https://www.equifax.com/personal/privacy/ | ✅ Free | Credit bureau — opt-out from prescreening lists |
| 47 | **CoreLogic** | https://www.corelogic.com/privacy/consumer-request/ | ✅ Free | Property records, mortgage data |
| 48 | **Melissa Data** | https://www.melissa.com/privacy-policy | ✅ Free | Data quality/verification |
| 49 | **Neustar (TransUnion)** | https://www.home.neustar/privacy/opt-out | ✅ Free | Marketing intelligence |
| 50 | **LiveRamp** | https://liveramp.com/opt-out/ | ✅ Free | Identity resolution — feeds ad platforms |
### Bonus: Easy Wins (Quick Opt-Outs)
These take 30 seconds each:
| Site | Opt-Out Link |
|------|-------------|
| **Nextdoor** | https://nextdoor.com/privacy_policy/ (delete account) |
| **YellowPages** | https://www.yellowpages.com/about/privacy |
| **SuperPages** | https://www.superpages.com/privacy |
| **AnyWho** | https://www.anywho.com/opt-out |
| **Switchboard** | https://www.switchboard.com/opt-out/ |
---
## 6. Step-by-Step Manual Process
### Phase 1: Preparation (Day 1)
**Step 1 — Search yourself thoroughly**
Create a list of all info to find/remove:
```
Name variants:
- Germaine Brown
- Germaine [Middle Initial] Brown
- G. Brown
Known emails:
- [list all emails you've used]
Phone numbers:
- [list current and past numbers]
Current address:
- [current Savannah address]
Past addresses:
- [any previous Savannah/Georgia addresses]
DOB: [month/day/year — needed for some opt-outs]
```
**Step 2 — Take screenshots**
Before removing anything, take screenshots of what shows up on Spokeo, Whitepages, BeenVerified — this documents what info is exposed.
**Step 3 — Set up a dedicated email**
Create a dedicated email address just for opt-out confirmations (e.g., `germaine.optout@gmail.com`). Many opt-outs require clicking a confirmation link, and this keeps it separate from your primary inbox.
**Step 4 — Create a tracking system**
Use the template in Section 9. A spreadsheet is essential — track:
- Site name
- Opt-out date
- Confirmation received? (Y/N)
- Removal verified? (Y/N)
- Re-check date
- Re-appeared? (Y/N)
### Phase 2: Execution (Days 114)
**Step 5 — Work Priority 1 first (Sites 110)**
Tackle the Big 10 first. Remove from Spokeo → Whitepages → Intelius → BeenVerified → TruthFinder → PeopleFinders → Radaris → MyLife → Nuwber → PeekYou.
For each site:
1. Search for yourself on the site (confirm they have your info)
2. Copy the profile URL (some sites need this)
3. Go to the opt-out page
4. Enter the required info (name, email, sometimes last 4 of SSN — **never provide full SSN**)
5. Check email and click the confirmation link
6. Log the date and confirmation in your tracker
**Step 6 — Work Priority 2 (Sites 1130)**
Same process. These typically take 13 minutes each.
**Step 7 — Work Priority 3 (Sites 3140)**
Background check firms and public records. Some may require:
- A scan/photo of your ID (driver's license) — redact all info except name + DOB if possible
- Mailed written request (very rare — most accept online now)
- Phone verification call
**Step 8 — Work Priority 4 (Sites 4150)**
Marketing data brokers. These are harder — their opt-out forms are buried in privacy policies and may take 24 weeks.
### Phase 3: Verification (Days 1430)
**Step 9 — Verify each removal**
Visit each site again and search for yourself. Confirm your listing is gone. Update your tracker.
**Step 10 — Repeat for any that didn't work**
Some sites will reject your opt-out (unusual name match, incorrect info, etc.). Try again or contact their support.
### Phase 4: Maintenance (Ongoing)
**Step 11 — Re-scan every 60 days**
Set a recurring calendar reminder. Data brokers re-populate from public records, data-sharing agreements, and new data breaches. Expect ~3050% of your info to reappear within 6 months without maintenance.
**Step 12 — Monitor HaveIBeenPwned**
Breach data feeds many people-search sites. If a site gets your info from a breach, opt-out from the broker directly.
---
## 7. Breach Database Check
### HaveIBeenPwned (https://haveibeenpwned.com)
Check every email address you've ever used:
- Primary email
- Old email addresses
- Work emails
- Email aliases
**What to do if your email appears in breaches:**
1. **Change passwords** for any compromised accounts immediately — use unique passwords for each
2. **Enable 2-factor authentication** on all accounts that support it
3. **Use a password manager** (Bitwarden — free; 1Password — paid; Apple Keychain — free)
4. **Check for credential stuffing** — if you reused the breached password anywhere else, change those too
5. **Review account recovery info** — update security questions and recovery emails
### Dehashed (https://dehashed.com)
A paid search tool that searches breached data more thoroughly than HIBP. Worth running once for $35 if you're concerned.
### Firefox Monitor (https://monitor.firefox.com)
Free breach monitoring from Mozilla. Shows breaches and offers guidance.
### Google Dark Report
https://one.google.com (Google One subscription includes dark web monitoring for your Gmail address)
---
## 8. Maintenance & Recurrence Schedule
| Frequency | Task | Time Required |
|-----------|------|---------------|
| **Day 1** | Initial scan + setup tracking | 1 hr |
| **Days 114** | Submit opt-outs for Priority 14 | 815 hrs total |
| **Day 30** | Verify all removals completed | 1 hr |
| **Every 60 days** | Re-scan top 10 sites + any that previously re-added you | 3045 min |
| **Every 90 days** | Full re-scan of all 50 sites | 1.52 hrs |
| **Every 6 months** | Run new HIBP check; add new email/address if moved | 15 min |
| **Annually** | Full wipe + re-opt-out of all sites | 35 hrs |
### Why data respawns
- **Public records** — County property records, court records, and voter registration are public. Data brokers continuously scrape them.
- **Data sharing agreements** — Brokers sell data to each other. Even after removal, they can buy your data back from another broker.
- **New data sources** — Every new account you create, purchase you make, or form you fill out can re-enter the ecosystem.
- **Acquisitions** — Data brokers are bought and sold. Your old opt-out may not carry over to the new owner.
---
## 9. Tracking Template
### Spreadsheet columns (create in Google Sheets or Airtable)
```
| Site Name | Priority | Opt-Out URL | Date Submitted | Confirmation? | Verified Removed? | Re-Check Date | Re-Appeared? | Notes |
|---------------|----------|--------------------------------------|----------------|---------------|-------------------|---------------|--------------|--------------------------|
| Spokeo | 1 | https://www.spokeo.com/opt-out | 2026-07-07 | ✅ Yes | ✅ Yes | 2026-09-07 | ❌ No | |
| Whitepages | 1 | https://www.whitepages.com/... | 2026-07-07 | ✅ Yes | ✅ Yes | 2026-09-07 | ❌ No | |
| Intelius | 1 | https://www.intelius.com/opt-out | 2026-07-08 | ⏳ Waiting | ❌ Pending | 2026-09-07 | — | |
| ... | ... | ... | ... | ... | ... | ... | ... | ... |
```
---
## Appendix A: Tips for a Savannah, GA Resident
1. **Georgia Voter Registration** — Your voter record (name, address, party affiliation) is public at https://mvp.sos.ga.gov/. You cannot fully remove it, but you can request confidential voter status if you have specific protection orders (victim of stalking, domestic violence, etc.).
2. **Chatham County Property Records** — Property ownership is public at https://www.chathamtax.org/. You can't remove it, but you could transfer title to an LLC or trust for privacy (costly — ~$500$2,000 in legal fees).
3. **Local Phone Directories** — Check if your landline (if any) is in the Savannah White/Yellow Pages online.
4. **Nextdoor Savannah Neighborhoods** — If you have a Nextdoor account for your neighborhood, be aware it shares your real name and address with neighbors.
---
## Appendix B: Quick Reference — What to NEVER Share
| Do NOT Share | Why |
|-------------|-----|
| Full Social Security Number | Identity theft — only the last 4 digits are ever needed for opt-outs |
| Full date of birth if avoidable | Most sites don't need it; use year-only or omit |
| Financial account numbers | NEVER needed for data broker removal |
| Passwords or security answers | No legitimate opt-out process asks for these |
| Medical information | Not relevant to data broker removal |
---
## Appendix C: If You Choose a Paid Service — Setup Checklist
1. ✅ Run a free scan on DeleteMe, Kanary, and Incogni to compare what they find
2. ✅ Pick your service (recommended: Kanary for value, DeleteMe for thoroughness)
3. ✅ Provide your info in their secure portal
4. ✅ Set your removal preferences (some keep a minimal public presence intentionally)
5. ✅ Review their dashboard after 2 weeks
6. ✅ Flag any sites they missed — submit those manually
7. ✅ Set a 60-day reminder to check the dashboard for respawns
8. ✅ After 6 months, run a free competitor scan to see if your service is missing things
---
*This document was compiled from publicly available privacy research and opt-out procedures. Opt-out links may change over time; verify each before starting. No guarantee is made that all sites will honor removal requests or that data will not reappear.*