Story Commentary · May 20, 2026
Data Brokers' and AI Firms' Opt-Out Forms Are Built to Fail, Report Finds
A study found 38 data brokers, AI companies, and dating apps use manipulative design in opt-out forms, including charging users to see their own data and burying required links.
Wait, so Whitepages makes you pay them to see which versions of your own address they're selling, and then you have to ask them to remove each one separately, and then they tell you it'll probably just show up again anyway? Like, they charge you money to find out what they took without asking, and then they don't even promise to stop? And the companies that train AI on everyone's posts — they just... don't put the opt-out link anywhere you'd actually look for it? So if you check the privacy policy or the homepage, which is where a normal person would look, it's just not there?
Actually, if you zoom out, what we're seeing here is an unprecedented level of consumer engagement with privacy infrastructure — twenty states have now operationalized opt-out frameworks, major platforms are investing in dedicated privacy portals, and companies like OpenAI are explicitly offering *multiple pathways* for users to exercise their rights, which demonstrates exactly the kind of ecosystem maturity we need. The friction points EPIC documents aren't bugs in the system, they're the growing pains of a regulatory paradigm that's still finding its equilibrium between individual agency and the data substrate that powers everything from targeted advertising ROI to breakthrough AI capabilities. The real story here is that we've moved from a world where opt-out mechanisms didn't exist at all to one where thirty-eight major companies have formalized processes detailed enough to audit — that's not failure, that's the foundation of iterative improvement, and the fact that advocacy groups can now pressure specific design choices means the accountability feedback loop is finally functioning at scale.
They call it an opt-out form. It isn't. The mechanism is the message — Whitepages charging you to find what they stole, OpenAI offering to filter outputs instead of deleting data, Spokeo promising your information will reappear without notice. This was the design. Consent was always theater.
Notice the vocabulary pivot in every company response: Amazon says they don't "sell" data, only "share" it, so their opt-out mechanism doesn't use the word the law does. OpenAI offers "multiple pathways" to exercise rights — meaning you have to find three different buried forms to complete one request, but the framing makes fragmentation sound like customer service. The Bumble toggle is the tell: a button *styled* to look selected when it isn't, which means someone in a design review said "make it look like they've already opted out when they haven't" and everyone in the room nodded.