Right to Delete Business Filing Data by State: Explainer

A consumer data-deletion right and a state business-filing registry are two different legal regimes. This page explains that boundary, points to the one real (eligibility-gated) suppression mechanism that does exist, and reports what the underlying matrices can currently support rather than repeating counts they no longer back.

Use the right-to-delete-by-state matrix as the structured comparison of which states have enacted a consumer data-deletion right. This explainer interprets what that enactment does and does not reach.

The confusion this page addresses is a specific and understandable one. A reader who has followed consumer-privacy law closely enough to know their home state grants a deletion right can reasonably wonder whether that same right lets them pull their own name off a formation filing they would rather not have on the public record. It does not, and the reason is not a loophole or an oversight — it is that the two legal regimes were built to govern different actors for different purposes.

Short answer: deletion rights vs. filing registries

Almost no state gives an LLC owner a direct right to remove their name or address from a formation filing once it is on record. Consumer privacy statutes such as California's CCPA and its counterparts in other states grant a right to delete personal data held by private-sector businesses that collect and process it. They do not reach a secretary of state acting as a public-records registrar.

The Address Confidentiality Program (ACP) is the one mechanism that does something closer to suppression: an eligible participant can use a state-provided substitute address on business filings in place of a home address. Eligibility is restricted — typically to survivors of domestic violence, sexual assault, stalking, or human trafficking — and it is not a general privacy option available to any filer who asks.

Why CCPA/CPA-style rights don't reach a Secretary of State's own filings

A consumer data-deletion right under a state privacy statute works like this: if a covered private-sector business has collected your personal data, you can ask it to delete that data, and the business must confirm deletion within a statutory time frame, subject to enumerated exceptions. California's Cal. Civ. Code Section 1798.105 (CCPA) is the model other states' statutes tend to follow.

A state business filing operates under a different legal framework entirely. When an LLC forms, the secretary of state publishes the formation document as a public record under the state's business-organization statutes, not as a private-sector data processor acting for its own commercial purposes. Consumer privacy statutes are written to reach the second category, not the first, and typically exempt or simply do not cover a government registrar acting in that capacity.

Practically, that distinction cuts one way and not the other. A reader can invoke a consumer deletion right against a data broker that scraped an LLC's address from a state portal and folded it into a resale profile. The same reader cannot invoke that right against the secretary of state to remove the address from the Articles of Organization itself — the filing office is not the kind of entity the statute reaches.

This is not a technicality that a better-worded request could talk around. A consumer-privacy statute defines the class of entity it binds, and a government office administering its own business-organization law falls outside that class by design, not by omission. Confusing the two regimes does not just produce a wrong answer about one filing; it can lead a reader to underestimate how durable a public filing actually is once it exists.

What can print now

Neither source matrix behind this page currently carries a cell-level publish status, applicability flag, in-force flag, or effective period on any row. That is a structural gap that applies to every cell regardless of whether the underlying number happens to be accurate, so this page does not restate a state count from either matrix as a current, source-bound fact.

The right-to-delete-by-state matrix's deletion-right field has gone further than that baseline: an independent semantic-validation pass has completed, not merely started, and a subset of rows came back confirmed supported. None of those rows is yet eligible to print here, because a separate print-clearance step — distinct from the validation step — has not run for any row in the matrix yet. A completed validation is a real step forward; it is not the same thing as a cleared print, and this page does not treat the two as interchangeable by naming which rows validated.

The address-confidentiality-program matrix is a step earlier in the same pipeline: an author packet has been sealed, but its own source-recheck has not yet passed, and independent validation has not started. Nothing from that matrix is closer to printable than the baseline gap described above.

This page previously described a set of states as carrying unresolved values in the deletion-right matrix. That framing is stale: the matrix has since recorded a dated confirmation note against those rows. This page does not restate the updated values themselves, because a resolved cell and a strict-facts-printable cell are not the same thing; the point worth making here is that the earlier unresolved framing should not be trusted going forward. The same caution applies to this page's earlier count of enacted Address Confidentiality Programs: the current tally in the matrix differs from that earlier figure, and neither number is reprinted here until it can bind through the strict facts mechanism.

The Address Confidentiality Program: the actual suppression mechanism

The Address Confidentiality Program is the closest thing to a suppression mechanism for personal data on a business filing. Participants who qualify receive a confidential substitute address, typically administered by a state attorney general or secretary of state, that can appear on filings in place of an actual home address. California's Safe at Home program is a working example: an eligible participant receives a substitute address under Cal. Gov. Code Section 6205 that can appear on business filings under Section 6207, and the participant's actual address stays confidential absent a court order, a law-enforcement request, or written consent.

Eligibility is the load-bearing constraint, not an afterthought. These programs are built for survivors of domestic violence, sexual assault, stalking, human trafficking, and — in some program designs — specific occupational categories such as election officials or reproductive-health workers. The program is eligibility-gated by design wherever it exists; it functions as a targeted safety mechanism, not a general-purpose filing-privacy option open to any LLC owner who requests it.

For an LLC owner outside that eligibility population, the practical substitute is a commercial registered agent, which puts the agent's address on the registered-agent field in place of the owner's own. That is a genuinely useful, widely available option, but it does not reach every address field a filing may require — an organizer or principal-office address can still appear depending on the state and the filing type.

Neither this page nor its source matrices track ACP eligibility rules or enrollment mechanics in detail; that belongs to the Address Confidentiality Programs by State explainer, which draws on the address-confidentiality-programs-by-state matrix directly.

What this page does not prove

• A consumer data-deletion right is not a filing-suppression right. The right-to-delete-by-state matrix tracks whether a state has enacted a consumer data-deletion statute. None of those statutes grant a right to remove data from a state's own public business records; they reach private-sector controllers and processors, not a government registrar.
• This page does not cover data-broker opt-outs. A consumer deletion right can potentially be invoked against a data broker holding personal data scraped from a public filing, but that process runs broker by broker and is covered separately in the Data Broker Registry by State explainer.
• Having a deletion right does not mean deletion is routine. A covered business can invoke statutory exceptions — fraud prevention, legal obligations, research, public interest — that limit which requests must be honored. The matrix records whether the right is enacted, not how often a request actually results in deletion.
• An enacted right does not describe its own procedure. Enactment tells a reader that a mechanism exists; it does not describe the request format, the response window, the verification steps a business may require, or what recourse exists when a request is refused. Those procedural details live in the statute and in a covered business's own compliance process, not in this matrix's enactment field.
• Neither matrix behind this page is yet strict-facts printable. Until cell-level publish status and an accepted print-clearance receipt exist for a given row, this page withholds the count rather than asserting one on the strength of validation alone.
• This page does not track member-name visibility on formation filings. Whether a state discloses an LLC's member or manager names on the initial or an ongoing filing is a related but separate exposure question from consumer data-deletion rights, covered in the Member Name Visibility by State explainer.

Sources

The right-to-delete-by-state matrix is the source for consumer data-deletion-right enactment, by jurisdiction. The address-confidentiality-programs-by-state matrix is the source for Address Confidentiality Program fields. Each should be cited independently; a field from one matrix does not stand in for a field in the other.

The Private Pierce methodology page explains freshness windows, typed unknowns, and how a value moves from candidate to accepted. Full source taxonomy at /about/source-registry/.

Private Pierce is not a law firm.

Private Pierce does not provide legal advice.

This page is not a substitute for the advice of an attorney.