District of Columbia data privacy rights and data broker removal (2026)

Comprehensive privacy law?No comprehensive law
Honors Global Privacy Control?Not required
Data-broker registry?No
Enforced byDistrict of Columbia Attorney General (Office of Consumer Protection)

How to exercise your rights

Residents rely on the breach-notification/data-security law and the DC Consumer Protection Procedures Act (CPPA, which has a private right of action), may submit opt-out/deletion requests to CCPA-covered data brokers, and may use the Global Privacy Control. No comprehensive DC mechanism to compel access/deletion.

Ready to see who's selling your information? Browse our data broker removal guides for step-by-step opt-out instructions.

Special protections

Security Breach Protection Amendment Act (D.C. Code § 28-3851 et seq.) with data-security requirements and notification duties. DC Consumer Protection Procedures Act (private right of action for deceptive practices). Address Confidentiality Program administered by the DC Office of Victim Services for DV/stalking survivors. No Daniel's-Law analogue identified.

How to file a complaint

Office of the Attorney General for the District of Columbia, Office of Consumer Protection — https://oag.dc.gov/consumer-protection

Recent updates (2025–2026)

Comprehensive privacy legislation has been proposed in the DC Council but not enacted as of 2026.

Frequently asked questions

Does District of Columbia have a data privacy law?

District of Columbia has no comprehensive consumer privacy law, but federal rules and data-broker opt-out paths still apply.

How do I remove my information from data brokers in District of Columbia?

Residents rely on the breach-notification/data-security law and the DC Consumer Protection Procedures Act (CPPA, which has a private right of action), may submit opt-out/deletion requests to CCPA-covered data brokers, and may use the Global Privacy Control. No comprehensive DC mechanism to compel access/deletion.

Can I sue for privacy violations in District of Columbia?

District of Columbia Attorney General (Office of Consumer Protection); the breach-notification law allows a private right of action for certain violations.

Does District of Columbia have a data broker registry?

No. District of Columbia does not have a dedicated data-broker registry, but you can still opt out of brokers directly.

Sources

  • https://oag.dc.gov/consumer-protection
  • https://code.dccouncil.gov/us/dc/council/code/titles/28/chapters/38A
  • https://iapp.org/resources/article/us-state-privacy-legislation-tracker

Find out what data brokers know about you

Run a free scan to see which sites are exposing your personal information — name, phone, address, email, and more.

Start your free scan