The law is on your side. Here's how to use it against data brokers.
Your privacy rights, the penalties brokers face for ignoring them, and ready-to-send letters for when they don't comply.
Four privacy laws, four sets of teeth
Pick where you live — deadlines, penalties, and the letter template below adjust to the law that protects you.
CCPA/CPRA (California)
- Who qualifies
- California residents
- Response deadline
- 45 days to respond (one 45-day extension permitted)
- Penalties
- $2,500-$7,500 per violation (regulator enforcement); $100-$750 per incident for certain data breaches (Cal. Civ. Code § 1798.150)
- Regulator
- California Attorney General ↗
- Right to know what data is collected
- Right to delete personal information
- Right to opt-out of data sales
- Right to non-discrimination for exercising rights
Template letter
Dear [Data Broker Name], I am a California resident exercising my rights under the California Consumer Privacy Act (CCPA), Cal. Civ. Code § 1798.100 et seq. I hereby request: 1. DELETION of all my personal information pursuant to § 1798.105 2. Confirmation of deletion within 45 days as required by § 1798.105(b) My identity information: - Full Name: [Your Name] - Email: [Your Email] - Phone: [Your Phone] - Address: [Your Address] If you fail to comply within 45 days, I will: 1. File a complaint with the California Attorney General 2. Pursue statutory damages of $100-$750 per incident under § 1798.150 3. Consider joining or initiating a class action lawsuit Sincerely, [Your Name] [Date]
Replace [bracketed text] with your actual information
When brokers don't comply
Five steps, in order of cost. Most cases resolve at step one or two — the rest is leverage you rarely need but should know you have.
Send Initial Request
Use the template letter above. Keep records of when you sent it.
Follow Up After Deadline
If no response by deadline, send a follow-up citing the law and penalties.
File Regulatory Complaint
File a formal complaint with the relevant regulatory agency.
Send Legal Demand
Have an attorney send a formal demand letter (optional but effective).
Small Claims Court
Sue for statutory damages in small claims (no lawyer needed).
Your secret weapon
If a business fails to protect your data and it's exposed in a qualifying breach, the CCPA lets California residents seek $100-$750 per incident (Cal. Civ. Code § 1798.150) in small claims court without a lawyer. Many companies settle quickly because defending costs more than the damages.
Or let us do all of this for you.
UnlistIN automates most of this process — we send the requests, track every deadline, and escalate when brokers don't comply. Start with a free look at what's out there.
No card · Nothing stored during the check