Cloaked raised $375M on the data-removal thesis. Here's what individual consumers can take from that.
Cloaked — the privacy platform that automatically removes personal data from data broker sites — raised $375 million with backing from General Catalyst, Lux Capital, and DuckDuckGo. They've removed over a billion records and screened more than 40 million calls. Nearly 70 employees, expanding globally.
That's an enterprise-scale bet on a thesis most people haven't internalized yet: your personal data is actively circulating across hundreds of broker databases, and clearing it out is no longer a paranoia exercise — it's basic hygiene.
What data brokers actually do with your information
Most people have a vague awareness that their data "gets sold." The reality is more specific. Data brokers aggregate your name, address, phone numbers (including every number you've used over the last decade), employer, income estimates, family member names, and in some cases daily routine inferences. They sell this to direct marketers, insurance underwriters, HR background check companies, people-search sites, and anyone else willing to pay.
The threat model in 2026 is different from five years ago. AI-assisted scraping and enrichment has made the data more accurate and more accessible. A social engineer who wants to impersonate you or your bank no longer needs a sophisticated operation — they need a few broker queries and a convincing voice.
The practical exposure isn't theoretical for most people. If your cell number and home address are publicly queryable on 40+ data broker sites, every phishing campaign targeting your area has your contact info. Every scammer buying lists from Whitepages, Spokeo, or their data partners has a current entry for you.
California's DROP enforcement starts August 1
The California Privacy Protection Agency's Data Rights for Opt-out Provisions (DROP) rule changes the regulatory landscape starting August 1, 2026. Data brokers subject to California law must process deletion requests at least once every 45 days. Non-compliance: $200 per deletion request per day.
That rule creates leverage consumers haven't had before. The legal obligation is on the broker, and the fines are steep enough to incentivize actual compliance.
But opt-outs submitted individually to each broker are still a manual process. There are 40+ major brokers, each with their own deletion portal. Submitting to all of them, verifying removal, and re-submitting when your data gets re-added (which happens) is 5-10 hours of work done once and then requires ongoing maintenance.
Automated data removal
The approach that actually works is automated: a service that submits opt-out requests across all 40+ major brokers, verifies deletions, and runs on a continuous basis so your data doesn't creep back in after 6 months.
BizSuite's data-removal service covers 48 brokers across 5 tiers (high-priority people-search sites, background-check vendors, AI training data aggregators, marketing list providers, and regional databases). Built around California's SB 362 / DELETE Act requirements. $497 one-time plus $49/month for ongoing monitoring and re-submission.
The $375M Cloaked raised isn't surprising if you understand the problem clearly. The TAM is every person with a digital footprint — which at this point means everyone. The reason most people haven't acted is that the process is tedious, not because the threat isn't real.
The DROP enforcement deadline is a good forcing function. If your data is on these sites and California law now requires brokers to honor deletion requests, August 1 is when it becomes worth actually filing them.
Top comments (0)