At a glance
| State | Registry | State deletion tool |
|---|---|---|
| California | Yes | Yes (DROP) |
| Vermont | Yes | Under study |
| Texas | Yes | No |
| Oregon | Yes | No |
| New Jersey | Passed June 30, 2026; the registry starts after a 270-day delay | No |
California CA
The most developed framework: a consumer privacy law with a right to delete, a data broker registry, and a free state-run deletion platform (DROP) under the Delete Act.
- Registry
- Yes. Brokers must register with the California Privacy Protection Agency (CPPA).
- Deletion
- Yes. DROP launched for consumers on January 1, 2026. Registered brokers began processing requests on August 1, 2026 and must re-check the list at least every 45 days.
- Agents
- Yes. DROP allows authorized agents once you've verified residency; the agent's name, email and trade name must be disclosed in your DROP account.
Brokers may mark requests exempt for public-record data. Stanford researchers found widespread gaps in brokers' compliance with the Delete Act's requirements.
Vermont VT
Vermont created the first state data broker registry. A 2026 law raised registration requirements and set up a study of a statewide deletion mechanism.
- Registry
- Yes. Act 138 (2026) raised the registration fee and added a bond requirement.
- Deletion
- Not yet. Act 138 orders a study of a statewide deletion mechanism. The text of H.211 as passed describes a mechanism starting in 2028, so check the current status before relying on either.
- Agents
- Depends on the specific request. Check the current statute.
Texas TX
Texas has a data broker registry and a comprehensive consumer privacy law (TDPSA) with a right to delete.
- Registry
- Yes.
- Deletion
- No state platform. Use each broker's own process; the TDPSA gives a right to delete personal data held by covered businesses.
- Agents
- Yes, under the TDPSA.
Oregon OR
Oregon has a data broker registry and a comprehensive privacy law (OCPA) with a right to delete.
- Registry
- Yes.
- Deletion
- No state platform. Use each broker's own process.
- Agents
- Yes, under the OCPA.
New Jersey NJ
New Jersey passed a data broker registry law in June 2026, with the registry delayed by 270 days. Separately, Daniel's Law lets judges, prosecutors, law enforcement officers and their families demand removal of home addresses and phone numbers.
- Registry
- Passed June 30, 2026; the registry starts after a 270-day delay.
- Deletion
- Daniel's Law gives covered officials a direct right to removal. Others use each broker's own process.
- Agents
- Daniel's Law permits assignees and authorized agents in some cases. Check current rules.
Everywhere else
A growing number of states, including Colorado, Connecticut, Virginia and others, have comprehensive consumer privacy laws that give residents a right to delete personal data held by covered businesses. Coverage, exemptions and agent rules differ by state, and many people-search sites rely on public-record exemptions. Most people-search sites still accept voluntary opt-outs from anyone, which is how we handle removals outside California.
Expect more states to copy California's approach over the next few years. We treat each state platform as one more channel to file through, alongside each site's own opt-out.