Right to Remove

Home / Guides

Is doxxing illegal in California? What the law says and what to do

Posting someone's home address to set others on them can be a crime in California. Here is the law, its limits, and the steps that protect you fastest.

Updated October 29, 2026. General information about California and federal law, not legal advice.

The short answer. Doxxing can be a misdemeanor in California under Penal Code section 653.2 when it is done to put you in fear and get others to harass you. Report threats to police, get your contact details out of Google, and use California's DROP platform to make data brokers delete your information.

What California law says

Penal Code section 653.2 makes it a misdemeanor to electronically distribute, publish or make available another person's personal identifying information, without their consent, with intent to place them in reasonable fear for their safety or their family's safety, and for the purpose of causing them unwanted physical contact, injury or harassment by a third party. The penalty is up to one year in county jail, a fine of up to $1,000, or both.

Personal identifying information can include your address, phone number, photos, workplace and details about your family. The key elements are intent and purpose: the law is aimed at people who post your information to set others on you.

Related protections

  • Stalking. Penal Code section 646.9 covers a pattern of harassment, including electronic communications, combined with a credible threat.
  • Civil harassment restraining orders. Under Code of Civil Procedure section 527.6, a court can order a known harasser to stop contacting you and to stay away. California courts provide the forms online and at self help centers.
  • Intimate images. Posting intimate images without consent is covered by separate criminal and civil laws, and by the federal TAKE IT DOWN Act.

What to do right now

  1. Make sure you are safe. If you feel in danger, call 911. Tell people at home and at work what is happening.
  2. Save the evidence. Screenshots showing the URL, date and time, plus any messages or threats.
  3. Report to the platform. Most platforms ban doxxing and act on it faster than on other complaints.
  4. Report to police. Bring your evidence and ask that a report be taken under section 653.2. Keep the report number.
  5. Remove your details from Google. Google's Results about you tool handles results showing your address, phone and email. See our guide to removing content from Google.
  6. Use DROP. California's Delete Request and Opt out Platform lets you send one request that every registered data broker must honor. Brokers began processing requests by August 1, 2026, and must check for new requests every 45 days.
  7. Lock down your accounts. Turn on two factor authentication, review privacy settings, and remove personal details from public profiles.

Why enforcement is still weak

Doxxing cases are hard to prosecute. Police must prove intent and purpose, posters are often anonymous, and many departments lack resources for online cases. Our proposal asks California to broaden and enforce its electronic harassment law so that posting someone's private information to provoke harassment carries real consequences.

Common questions

Is it illegal to post someone's address online in California?

Posting an address is not always a crime by itself. Under Penal Code section 653.2 it is a misdemeanor when someone electronically distributes your personal identifying information, without your consent, with intent to place you in reasonable fear for your safety and for the purpose of causing others to harass or injure you.

What is the penalty for doxxing in California?

A violation of Penal Code section 653.2 is a misdemeanor punishable by up to one year in county jail, a fine of up to $1,000, or both. Related conduct can also be charged as stalking or criminal threats.

Can I get a restraining order against someone who doxxed me?

If a known person has harassed you, you can ask a California court for a civil harassment restraining order under Code of Civil Procedure section 527.6. Courts provide forms and self help centers can assist.

How do I remove my address from data broker sites in California?

Californians can use DROP, the Delete Request and Opt out Platform run by the California Privacy Protection Agency, to send one deletion request to every registered data broker. Brokers had to begin processing these requests by August 1, 2026.

This guide explains the law in general terms and may not fit your situation. Deadlines in these cases are short, so talk to a California lawyer about your facts. The State Bar of California certifies lawyer referral services.