“Good luck,” the Electronic Privacy Information Center tells internet users trying to keep their personal data from being shared across the web. The nonprofit research center published a new report on Wednesday analyzing what it calls “manipulative design patterns” in the opt-out processes of 38 major companies, including data brokers, social media platforms, dating apps, and AI firms. This comes despite privacy laws in 21 states that give consumers the right to opt out of the sale and sharing of their personal data and require companies to provide clear, easy-to-use opt-out mechanisms. “When opt-out processes use manipulative design patterns, they only give the illusion of choice instead of giving people real autonomy over their personal information,” said Epic Counsel and Co-Author of the report Caroline Kraczon in a press release. “Our research shows that too many companies use manipulative design to frustrate, confuse, and discourage consumers from trying to protect their personal data.”

Kraczon goes on to say these design choices can have real-world consequences like doxxing, stalking, and targeted harassment. The report highlights the murder of Minnesota state legislator Melissa Hortman and her husband last year as an example. According to EPIC, the alleged killer used “people search” data brokers to research his targets.