District of Columbia data privacy rights and data broker removal (2026)
How to exercise your data privacy rights in District of Columbia, opt out of data brokers, and file a complaint — updated for 2026.
At a glance
- Comprehensive privacy law? No. Your rights come from the statutes below.
- Honors Global Privacy Control? Not required
- Data-broker registry? No
- Enforced by District of Columbia Attorney General (Office of Consumer Protection)
What Delist can do for you in District of Columbia
District of Columbia has no comprehensive privacy law in effect. We submit your requests through each broker's own opt-out channel, on your behalf. Many national brokers honor these requests wherever you live, but none is required to by District of Columbia law, so we follow up and re-file rather than assume.
How the three groups work: our authorized-agent framework.
What still protects you
DC residents have breach-notification and data-security rights (D.C. Code § 28-3851 et seq.) and strong general consumer-protection remedies (the CPPA, with a private right of action for deceptive practices), plus the practical ability to opt out of/request deletion from CCPA-covered data brokers and to use GPC. They cannot compel most businesses to honor comprehensive access, correction, deletion, or opt-out rights under DC law.
How to exercise your rights
Residents rely on the breach-notification/data-security law and the DC Consumer Protection Procedures Act (CPPA, which has a private right of action), may submit opt-out/deletion requests to CCPA-covered data brokers, and may use the Global Privacy Control. No comprehensive DC mechanism to compel access/deletion.
Ready to see who's selling your information? Browse our data broker removal guides for step-by-step opt-out instructions.
Special protections
Security Breach Protection Amendment Act (D.C. Code § 28-3851 et seq.) with data-security requirements and notification duties. DC Consumer Protection Procedures Act (private right of action for deceptive practices). Address Confidentiality Program administered by the DC Office of Victim Services for DV/stalking survivors. No Daniel's-Law analogue identified.
How to file a complaint
Office of the Attorney General for the District of Columbia, Office of Consumer Protection — https://oag.dc.gov/consumer-protection
Recent updates (2025–2026)
Comprehensive privacy legislation has been proposed in the DC Council but not enacted as of 2026.
Frequently asked questions
Does District of Columbia have a data privacy law?
District of Columbia has no comprehensive consumer privacy law, but federal rules and data-broker opt-out paths still apply.
How do I remove my information from data brokers in District of Columbia?
Residents rely on the breach-notification/data-security law and the DC Consumer Protection Procedures Act (CPPA, which has a private right of action), may submit opt-out/deletion requests to CCPA-covered data brokers, and may use the Global Privacy Control. No comprehensive DC mechanism to compel access/deletion.
Who enforces privacy law in District of Columbia?
District of Columbia Attorney General (Office of Consumer Protection); the breach-notification law allows a private right of action for certain violations.
Does District of Columbia have a data broker registry?
No. District of Columbia does not have a dedicated data-broker registry, but you can still opt out of brokers directly.
Sources
Also in this state
Find out what data brokers know about you
A free scan shows which sites are exposing your name, phone, address and email, and Delist files the removals for you.