The United States has no general right to be forgotten. No federal law lets Americans demand that search engines delist truthful information about them, and the First Amendment makes a European-style rule effectively impossible — courts have consistently protected the publication of lawfully obtained, truthful information. But the practical question people are really asking — “can I get this content about me removed or hidden?” — has a far more useful answer. A patchwork of state privacy laws, platform policies, and Google’s own removal programs now accomplishes much of what the EU right delivers, if you know which lever fits which content.
What exists instead of a US right to be forgotten?
State privacy laws with deletion rights. The California Consumer Privacy Act (as amended by CPRA) gives California residents the right to demand businesses delete personal information collected about them, and roughly twenty states — Virginia, Colorado, Texas, Connecticut, Oregon, and others — have followed with comparable laws. Crucially, these apply to businesses that collected your data, which makes them powerful against data brokers and people-search sites, and largely useless against journalism, which is expressly exempted.
The California “Eraser Law” requires platforms to let minors delete content they themselves posted — narrow, but real.
Google’s voluntary removal policies. Google now removes, on request, personally identifiable information (addresses, phone numbers via its “Results about you” tool), non-consensual explicit images, explicit deepfakes, doxxing content, medical records, and images of minors. None of this is law; all of it works, and it constitutes the closest thing Americans have to delisting.
Sector rules and record remedies. The FCRA limits how long background-check companies can report most negative records; HIPAA constrains health-data disclosure; expungement and record sealing at the state level can eliminate the public source for criminal and some civil records.
What genuinely doesn’t exist: any right to force removal of truthful news reporting, court opinions, or archives. Anyone selling a “guaranteed right to be forgotten” in the US is selling something the law does not contain. The contrast with the EU and UK — where GDPR Article 17 supports real delisting requests — is stark, and dual citizens or EU residents should read our GDPR right to be forgotten guide, because the European route may apply to them.
The US removal strategy, step by step
- Inventory your exposure. Search your name, name plus city, and name plus employer across Google and Bing. Sort every damaging result into a category: data-broker listing, platform content, news article, court record, or independent website. The category dictates the lever.
- Hit the data brokers with statutory deletion requests. For Spokeo, Whitepages, BeenVerified, Radaris, and the hundreds like them, CCPA-style deletion requests (and their opt-out flows) are effective and legally backed. This is the highest-yield step for most people — our data broker removal service automates it across the full broker ecosystem, with the ongoing monitoring that matters because brokers repopulate.
- Use Google’s removal programs for qualifying content. Submit “Results about you” requests for contact-information results, and policy-based requests for explicit imagery, doxxing, or medical data. These delist the result from your name searches even when the page stays up.
- Address platform content under platform rules. Old posts, photos, and accounts come down through deletion (yours) or reporting flows (others’), governed by each platform’s policies rather than any law.
- Attack records at the source. Expungement or sealing where eligible converts an immovable public record into a removable one; the aggregators lose their source and de-indexing requests gain teeth.
- De-index or suppress what remains. Content that no law or policy reaches — truthful reporting, old blog posts, forum threads — is handled by negotiation with site owners, and by suppression: building authoritative content that outranks it. That’s the discipline of removing search results, and it’s where realistic expectations matter most.
Get a Free, Confidential Exposure Scan
Timelines and honest expectations
Data-broker deletions land in days to six weeks per site, with re-listing over time unless monitored. Google policy removals typically resolve in one to three weeks. Statutory deletion requests give businesses 45 days (extendable) under most state laws. Expungement runs months. Suppression of unremovable content is a three-to-nine-month project, not a purchase.
The honest frame: a US resident cannot erase truthful journalism or public court opinions, and no one should promise it. What a well-run campaign achieves is the practical equivalent of being forgotten — brokers cleared, qualifying results delisted, sources removed where levers exist, and the rest pushed out of meaningful visibility. For most clients, that outcome is functionally indistinguishable from the European right. The full-scope version of this work is our personal data removal practice, and for people who want everything done at once, deleting yourself from the internet walks the complete sequence.
Frequently asked questions
Is there any actual right-to-be-forgotten law in the United States?
No general one, and the First Amendment forecloses a European-style version. What exists: state privacy laws with deletion rights against data collectors (California, Virginia, Colorado, Texas, and many more), the FCRA’s reporting time limits, minors’ deletion rights in California, and expungement statutes — plus Google’s voluntary removal policies, which do most of the day-to-day work.
Can I use the GDPR if I’m American?
Generally no. GDPR delisting rights attach to people in the EU/UK, and Google delists only on European domains and for European users anyway. If you hold EU citizenship or residence, the European route may be available for your searches there — see our GDPR guide.
Can Google be forced to remove truthful content about me in the US?
Forced, no — absent a court order on the underlying content. But Google voluntarily removes broad categories: personal contact information, explicit images shared without consent, doxxing, medical records, and more. Requests under those policies are the practical delisting path, and they succeed regularly.
Do CCPA deletion requests work on news sites?
No. Every state privacy law exempts journalism, and the First Amendment would protect it regardless. News content is addressed through publisher outreach, corrections and updating policies, de-indexing where the story qualifies under Google policies, or suppression — see our guide to removing news articles.
What’s the single most effective first step?
The data-broker sweep. It removes the largest volume of exposed personal data, it’s legally backed in most states, and it eliminates the sites most likely to fuel doxxing, scams, and unwanted contact. Everything else builds on a clean broker layer.
The gap between US law and practical removal is exactly where strategy matters. Request a free, confidential Exposure Scan and we’ll show you which of your results are removable under which lever — law, policy, or negotiation — and run it end to end through our process.
