Remove sensitive information at its source, clear it from search engines, and keep monitoring so exposed data does not quietly return.
Start With the Source, Not Just the Search Result
Finding your home address, phone number, identification details, medical records, login credentials, or private images in search results can be alarming.
The information may expose you to identity theft, fraud, stalking, harassment, impersonation, blackmail, or unwanted contact. Removing it often requires more than submitting one form.
The most effective approach is to:
- Record every page exposing the information.
- Remove, redact, or correct it on the original website.
- Ask search engines to remove or update the affected results.
- Use privacy rights, abuse reports, or regulatory complaints when necessary.
- Continue monitoring for duplicate pages and republished data.
Search-result removal can make information much harder to find. Removing it from the website that published it gives you the best chance of keeping it unavailable.
Take Immediate Action When the Information Creates a Safety Risk
Some situations require protective action before you begin filing routine removal requests.
If login credentials are exposed
Change the affected passwords immediately. Sign out of other sessions, enable multifactor authentication, and replace any password reused on another account.
If banking or card information is exposed
Contact the financial institution, freeze or replace affected accounts or cards, and review recent transactions.
If identification documents are exposed
Contact the issuing authority if the document may need to be replaced. Monitor for identity fraud and preserve evidence showing where the document appeared.
If the content includes threats, stalking, or doxxing
Take screenshots, save the exact URLs, record dates and usernames, and preserve relevant messages. Contact the platform, website host, police, or a local support service when there is a credible safety threat.
If intimate images or sexual deepfakes are involved
Do not pay anyone demanding money to remove the content. Save the URLs and other non-explicit evidence, then use the website’s abuse process and the search engine’s dedicated reporting route.
Do not download, screenshot, forward, or upload sexual imagery involving anyone under 18. Report the location of the content through the appropriate child-safety or law-enforcement channel.
Search-Result Removal Is Not Internet Removal
Search engines usually do not own the webpages appearing in their results. They index content hosted by publishers, government agencies, social networks, directories, forums, and other websites.
That creates three different removal actions:
| Action | What it does | Best use |
|---|---|---|
| Source removal | Deletes or redacts information on the original website | When the information is still visible on the live page |
| Search-result removal | Stops or limits a URL from appearing in a search engine | When the result qualifies under a search policy or privacy law |
| Outdated-result refresh | Updates an old title, snippet, image, or cached result | When the source page has already been deleted or changed |
A search engine may completely remove a URL or hide it only from searches containing your name or another identifier. The page may still be accessible through a direct link, another search engine, social media, or different search terms. Google explicitly distinguishes full removal from partial, name-based removal.
Choose the Correct Removal Route
Start with the route that matches your situation.
| Situation | Best first action |
|---|---|
| The webpage has already been deleted | Request an outdated-result refresh |
| The page remains online | Contact the publisher and file a search-engine request |
| Your address, phone number, or email appears on Google | Use Google’s Results About You |
| Passwords, financial details, or identification numbers are exposed | Secure affected accounts, then use the detailed personal-information form |
| The page contains threats or extensive doxxing | Preserve evidence and report it as harmful personal information |
| Intimate or fabricated sexual content appears | Use the dedicated sexual-content removal process |
| A people-search site publishes your details | Submit the site’s opt-out form and use applicable data-broker rights |
| An old title or snippet still exposes removed information | Use the search engine’s outdated-content tool |
| A public record contains sensitive data | Contact the authority that created the record about redaction or suppression |
| The request is rejected | Correct the evidence, appeal where available, or escalate under applicable privacy law |
What Personal Information Can Be Removed?
Search engines do not remove every result simply because it is embarrassing, critical, or unwanted.
A request is more likely to succeed when the result exposes information that creates a clear privacy, identity-theft, fraud, or safety risk.
Google’s policies allow requests involving information such as:
- Home addresses
- Personal phone numbers
- Private email addresses
- Government identification numbers
- Bank account or credit card numbers
- Images of identification documents
- Images of handwritten signatures
- Medical and other private records
- Confidential usernames and passwords
- Personal information accompanied by threats
- Large collections of personal information published without a legitimate purpose
- Certain intimate, nude, sexual, or fabricated sexual images
Google may also remove non-explicit images of a person who is currently under 18, subject to limited public-interest exceptions.
Results are less likely to be removed when they come from a government body, court, newspaper, educational institution, professional register, or another source with a strong public-interest purpose.
Find Every Page That Exposes Your Information
Before submitting removal requests, build a complete inventory of the affected pages.
Search while signed out or in a private browser window to reduce the effect of personalized results. Try searches such as:
- Your full name in quotation marks
- Previous names or alternate spellings
- Your name and city
- Your name and employer
- Your email address
- Your phone number
- Your current and former addresses
- Usernames you have used
- Your name in image search
- Your phone number or email in quotation marks
Check Google, Bing, image search, people-search sites, social media, regional search engines, and AI-powered search services that may surface or summarize the original page.
Record the exact URL of the webpage containing the information. Do not save only the URL of the search-results page.
A simple tracking sheet can include:
| Search query | Source URL | Information exposed | Website contacted | Search request | Status |
|---|---|---|---|---|---|
| Full name and city | Exact page address | Home address | Yes | Google submitted | Pending |
| Phone number | Directory profile | Phone and relatives | Opt-out sent | Bing pending | In progress |
Take screenshots before requesting removal, especially when the page involves threats, impersonation, harassment, extortion, intimate imagery, or false factual claims.
Step 1: Remove the Information From the Original Website
Delete content you control
Begin with accounts and pages you can edit yourself.
Review:
- Social media profiles
- Old forum accounts
- Personal blogs
- Portfolio websites
- Public cloud files
- Marketplace listings
- Community profiles
- Business directories
- Comments and reviews
- Documents you uploaded
Deleting an account may not immediately remove every public profile, image, post, or cached page associated with it. Remove the individual content first where possible, then close the account.
Google may reject a removal request when you control the page and can delete the information yourself.
Contact the website owner
When someone else controls the page, look for:
- A privacy contact
- A support form
- A report-abuse link
- A webmaster address
- A data protection officer
- A legal contact
- A copyright contact
- Contact details in the privacy policy
Keep the request focused. Identify the exact URL, the information exposed, the harm it may cause, and the action you want.
Hello,
The page at [exact URL] publishes my [type of personal information]. This information identifies me and creates a risk of [identity theft, fraud, stalking, harassment, impersonation, or other specific harm].
Please remove or redact the information and confirm when the page has been updated. If the page must remain online, please remove my personal details and prevent the page from appearing in searches for my name where possible.
Thank you.
Do not send more identification than necessary. When identity verification is required, ask what must be provided, why it is needed, how it will be protected, and when it will be deleted.
Ask for redaction when deletion is not possible
A publisher may have a legal, historical, or operational reason to keep a page online.
Request a narrower change instead:
- Remove your address or phone number
- Replace your full name with initials
- Remove an attached document
- Blur identifying details in an image
- Correct inaccurate information
- Remove your name from the page title
- Remove your name from metadata
- Add a
noindexinstruction - Limit public access to the document
A targeted request is often easier to approve than complete deletion.
Contact the hosting provider when the publisher is unreachable
A hosting provider does not normally remove lawful content merely because it is unwanted. It may act, however, when a customer violates its rules by publishing threats, stolen credentials, impersonation, malware, illegal imagery, or other prohibited material.
Use a hosting lookup service to identify the provider, then submit a concise abuse report with the exact URL and supporting evidence.
A domain registrar usually manages the domain name rather than the website’s content. Contacting the registrar is generally useful only when the domain itself is being used for fraud or another serious policy violation.
Remove Information From People-Search and Data-Broker Sites
People-search services often publish:
- Addresses
- Phone numbers
- Age ranges
- Relatives
- Property records
- Previous locations
- Email addresses
- Possible associates
Most people-search sites offer an opt-out process. The U.S. Federal Trade Commission notes that people can usually opt out themselves for free, one site at a time, or pay a service to submit requests on their behalf.
After submitting an opt-out:
- Save the confirmation email.
- Record the request date.
- Check the listing again later.
- Search for duplicate profiles.
- Repeat the request if the information returns.
Data can reappear when a broker imports new public records or creates another profile.
California’s DROP system
California residents can use the state’s Delete Request and Opt-out Platform, known as DROP, to send one deletion request to registered data brokers.
DROP opened to residents on January 1, 2026. Beginning August 1, 2026, registered data brokers became responsible for retrieving and processing eligible deletion requests, subject to legal exceptions.
This can reduce the need to contact every registered broker separately, although it does not remove records directly from government databases, news sites, or unrelated publishers.
Step 2: Remove Personal Information From Google
Use Results About You for contact details
Google’s Results About You feature is designed to locate and remove results containing personal contact information such as:
- Home addresses
- Phone numbers
- Email addresses
You can enter the details you want monitored, review matching pages, request removal, and receive notifications about new results in supported markets. Google may not offer the removal option for results it considers valuable to the public, including some government, educational, news, and business pages.
You can also begin from a Google result:
- Search for your name or exposed information.
- Open the options beside the result.
- Select Remove result.
- Choose the personal-information reason.
- Complete the reporting process.
- Track the request in Results About You.
Enter the information exactly as it appears on the page. A mismatch between your request and the published content can lead to delays or rejection.
Use Google’s detailed personal-information request
Use Google’s broader removal process when the result exposes information beyond ordinary contact details.
This includes:
- Government identification numbers
- Financial account information
- Credit card details
- Login credentials
- Images of signatures or identification
- Private medical records
- Doxxing accompanied by threats
- Large collections of personal information published without a legitimate purpose
Google requires the exact URLs of the pages containing the information. Only the submitted URLs are reviewed. Google may remove the result completely or limit its appearance for searches containing your name or identifier.
A strong request should include:
- The exact source URL
- The search terms revealing the page
- A clear description of the exposed information
- Screenshots showing its location
- An explanation of the likely harm
- Evidence that the information relates to you
Do not submit repeated requests for the same URL unless you are correcting an error, adding material evidence, or reporting changed content.
Report doxxing and threats
Google defines doxxing removal eligibility around personal information published with threats, calls for harm or harassment, or a significant amount of aggregated personal information without a legitimate purpose.
Explain the risk precisely. Instead of saying that a result is “dangerous,” identify what it reveals and how it could enable stalking, identity theft, harassment, or physical harm.
Remove intimate images, sexual deepfakes, and false sexual associations
Google provides a dedicated process for sexual content involving you.
Eligible requests can include:
- Nude or sexually explicit images
- Intimate images distributed without permission
- Certain images that were originally created consensually
- AI-generated sexual deepfakes
- Fabricated nude images
- Pages falsely associating your name with sexual content or sex work
Google’s process covers both real and fabricated material, but removing a search result does not delete the image or video from the website hosting it. Report every source page and image result you can identify.
Report exploitative removal websites
Some websites publish embarrassing or personal information and then demand payment for deletion.
Google has a separate removal policy for sites using exploitative removal practices. Report the relevant result through that category rather than paying the publisher or filing an inaccurate copyright claim.
Remove outdated Google results
Use Google’s Refresh Outdated Content tool when:
- The webpage has been deleted
- The page no longer contains the information
- An image has been removed
- The search title or snippet still shows old personal data
The tool is designed to update Google’s index after the live source has changed. It generally will not remove information that remains visible on the webpage.
Step 3: Remove or Update Personal Information on Bing
Bing also separates the original webpage from its search index.
When the information remains online:
- Contact the website owner.
- Request deletion, redaction, or correction.
- Submit a Bing content-removal or concern report when the material may violate Microsoft policy or applicable law.
- Use the relevant privacy-request process when regional data-protection rights apply.
When the page has already been deleted or updated, use Bing’s Content Removal Tool to request removal of a dead page or refresh an outdated cached result.
Removing a result from Google does not automatically remove it from Bing. File a separate request with every search engine displaying the page.
Privacy and Delisting Rights by Country
Removal rights vary significantly by location. Search-engine policies may apply globally, while legal rights depend on the person, organization, content, and jurisdiction involved.
United States
The United States does not have one broad nationwide right requiring search engines to remove ordinary personal information from lawful search results.
Practical options usually come from:
- Search-engine removal policies
- Website privacy policies
- People-search opt-outs
- State consumer privacy laws
- Data-broker deletion rights
- Address-confidentiality programs
- Court-record redaction procedures
- Laws covering harassment, threats, impersonation, intimate imagery, or identity theft
State privacy laws may allow eligible residents to request deletion or correction from covered businesses and opt out of certain sales or sharing of personal information.
These laws contain exemptions and generally do not force newspapers, courts, government agencies, or every public-record source to erase lawful information.
California residents have an additional data-broker option through DROP, which sends a deletion request to registered brokers through one state-managed platform.
United Kingdom
UK data protection law allows individuals, in some circumstances, to ask search engines to delist results containing their personal data from searches for their name. Delisting does not remove the original webpage and may not prevent the result from appearing for other search terms.
Factors affecting a UK delisting decision include:
- Whether the information is accurate
- How old it is
- Whether it is sensitive
- Whether it creates a real safety risk
- Whether the person has a public role
- Whether the information concerns private or professional life
- Whether the publisher had a legal duty to publish it
- Whether journalism or freedom of expression is involved
- Whether the result concerns criminal activity
- Whether the privacy impact is disproportionate
Submit the request to the search engine first and provide evidence supporting the removal.
Organizations must now provide a clear way to make a data-protection complaint, acknowledge it within 30 days, investigate it appropriately, and communicate the outcome without undue delay. If the matter remains unresolved, it may be escalated to the Information Commissioner’s Office.
European Union and European Economic Area
Article 17 of the General Data Protection Regulation provides a right to erasure in specified circumstances. Search-engine delisting can also apply when name-based results contain personal data that is inaccurate, irrelevant, no longer relevant, excessive, or otherwise processed without an adequate legal basis.
The right is not absolute.
A search engine may retain results when access is justified by:
- Freedom of expression
- Journalism
- Legal obligations
- Public health
- Public safety
- Archiving or research
- Legal claims
- A strong public interest in the person or information
A successful request may affect European versions of a search service without making the webpage unavailable worldwide.
Canada
Canada does not currently provide the same straightforward, established nationwide delisting process available under European law.
In 2025, the Office of the Privacy Commissioner of Canada concluded in a specific case that PIPEDA applied to Google’s search service and recommended that certain articles be delisted from searches for the complainant’s name. Google refused to implement the recommendation, and the complaint remained classified as well-founded and unresolved.
The decision supports the argument that serious privacy and safety harms may justify name-based delisting in exceptional circumstances, but it does not guarantee that a general removal request will succeed.
A Canadian request should explain:
- The specific serious harm caused by the result
- Why the information should no longer be connected to the person’s name
- Why the privacy interest outweighs the public interest
- Why a narrower remedy, such as name-based delisting, is appropriate
Quebec provides more specific rights in certain situations. Its private-sector privacy law allows a person to request that an enterprise stop disseminating personal information or de-index a hyperlink associated with the person’s name when legal conditions are met, including specified cases involving unlawful publication or serious privacy or reputational harm that clearly outweighs public-interest and expression interests.
Australia
Australia does not have a broad European-style right requiring search engines to delist lawful results simply because they contain personal information.
Australians can still use:
- Search-engine policy requests
- Direct publisher requests
- Platform abuse reports
- Correction rights
- Privacy complaints
- eSafety reporting systems
- Laws covering threats, stalking, intimate imagery, impersonation, or other harmful conduct
Australian Privacy Principle 13 concerns correction of personal information held by covered organizations when it is inaccurate, out of date, incomplete, irrelevant, or misleading.
Australian Privacy Principle 11 requires covered entities to take reasonable steps to destroy or de-identify personal information they no longer need, subject to record-retention and other legal exceptions. This is an organizational obligation rather than a universal right to erase any search result.
Australians experiencing serious adult cyber abuse or image-based abuse can report the content to eSafety after following the applicable platform-reporting steps. eSafety can investigate qualifying cases and may direct services to remove seriously harmful content.
Why Removal Requests Get Rejected
Common reasons include:
- The request does not include the exact URL
- The information is not visible on the reported page
- The submitted details do not match the published information
- You control the page and can remove it yourself
- The wrong removal category was selected
- The result comes from a public-interest source
- The complaint concerns embarrassment rather than a privacy or safety risk
- The information concerns a public or professional role
- The content is accurate, current, lawful, and relevant
- The request asks the search engine to delete a webpage it does not control
- Another version of the page still contains the information
- The evidence does not establish that the content concerns you
When a request is denied, read the stated reason carefully.
Resubmit only when you can:
- Correct an error
- Add stronger evidence
- Identify the correct policy
- Provide an exact URL
- Show that the source page has changed
- Explain a material risk that was previously unclear
- Use an appeal route offered by the search engine
Do not submit false copyright, impersonation, defamation, or legal claims. An inaccurate report can weaken the request and delay legitimate action.
When to Escalate the Matter
Escalation may be appropriate when the content involves:
- Credible threats
- Stalking
- Identity theft
- Financial fraud
- Extortion or blackmail
- Nonconsensual intimate imagery
- Sexual deepfakes
- Impersonation
- Persistent doxxing
- Protected medical or identification records
- False factual allegations causing serious harm
- Information about a child
- A refusal to honor an applicable privacy right
Possible escalation routes include:
- The website’s abuse team
- The hosting provider
- The social media platform
- A search engine appeal
- A privacy regulator
- A consumer protection authority
- An online-safety regulator
- Police
- A lawyer experienced in privacy, media, defamation, or internet law
For inaccurate information, collect documents establishing the correct facts. Regulators and search engines are more likely to act on specific evidence than on a general denial.
Keep Personal Information From Reappearing
Removal is often an ongoing process.
After a successful request:
- Search your name and contact details regularly
- Enable Results About You notifications where available
- Recheck people-search sites
- Search for duplicate URLs
- Remove unnecessary details from public profiles
- Use a separate public-facing email address for business listings
- Avoid publishing your home address or private phone number
- Close unused accounts
- Review old forum posts and public documents
- Ask relatives not to publish your address or travel plans
- Keep records of every removal request and confirmation
- Repeat opt-outs when broker profiles return
Also review how the information became public. A successful removal will not solve the underlying problem if an old account, exposed document, public profile, compromised device, or recurring data feed continues publishing it.
Frequently Asked Questions
Can I remove my address from Google?
Google may remove results showing your home address under its personal-information policies. Results About You is the simplest route for eligible contact information. The address may still remain on the original website, so contact the publisher as well.
Can Google delete a webpage?
Google can remove a page from its own search results, but it cannot normally delete a webpage hosted by another organization. The website owner or hosting platform controls the source content.
What if the website has already deleted the information?
Use the search engine’s outdated-content tool. This asks the search engine to update its index, title, snippet, cache, or image result after the live page has changed.
Can public records be removed from search results?
Sometimes, but they are more difficult to remove. Contact the government agency or court that published the record and ask whether redaction, suppression, restricted access, or an address-confidentiality procedure is available.
Search engines may reject removal when the record has a continuing public-interest or legal purpose.
Will Google removal also remove the result from Bing?
No. Each search engine maintains its own index and removal process. Submit separate requests to every service showing the result.
Can negative news articles be removed?
Not merely because they are unfavorable.
A request may be stronger when the information is inaccurate, seriously outdated, unusually sensitive, connected to a private person rather than a public figure, or causing disproportionate harm with little remaining public value.
The outcome depends heavily on local law, the age and accuracy of the article, the person’s public role, and freedom-of-expression considerations.
Should I pay a removal company?
A reputable service can save time by locating broker profiles and submitting opt-outs, but it cannot guarantee that lawful news, public records, or protected search results will disappear.
Before paying, check:
- Exactly which sites are covered
- Whether monitoring is ongoing
- Whether the company needs identity documents
- How your data will be stored
- Whether the service renews automatically
- What happens when a listing returns
- Whether the work can be completed free through official forms
Avoid companies that guarantee complete internet removal or demand payment to remove content they published themselves.
Can removed information return?
Yes. A duplicate page, new data-broker import, changed URL, archived copy, social media repost, or updated public record can make the information searchable again.
That is why monitoring and source removal matter.
Remove the Source, Then Remove the Trail
The strongest way to remove sensitive personal information from search results is to act in the correct order.
First, protect yourself when the exposure creates an immediate financial or safety risk. Next, document every page and remove or redact the information at its source. Then submit separate requests to Google, Bing, and any other service displaying it.
Use outdated-content tools when the original page has already changed. Use privacy laws, online-safety systems, and regulatory complaints when ordinary requests fail.
Search-result removal makes harmful information harder to discover. Source removal, careful documentation, and continued monitoring give you the best chance of keeping it gone.