You can sue someone for giving out your phone number, but whether it’s worth doing depends on who shared it, how far it spread, and what happened next. Privacy lawsuits over a disclosed number are legally possible but hard to win. In many situations, the stronger claims aren’t privacy claims at all — they’re federal statutes aimed at the unwanted calls and texts that arrive after the number gets out.
When the Disclosure Itself Is the Legal Wrong
The privacy tort most people have in mind is called public disclosure of private facts. Most states recognize it. It applies when someone publicizes private information about you in a way a reasonable person would find highly offensive, and the information isn’t something the public has a legitimate interest in knowing.
The word “public” carries most of the weight. This claim requires that the information reached the public at large or a substantial number of people, usually through mass media, a social media post, or something similar in reach. Telling one person your number, or passing it to a handful of friends, almost certainly doesn’t qualify. If your ex handed your number to their new partner, or a coworker shared it with a few people, that likely fails on the publicity element before anything else.
Even when someone does broadcast your number widely, you still have to show the number was genuinely private. If it appears in public directories, on your business website, or on social media profiles you control, a court may find it wasn’t private to begin with. The strongest cases involve unlisted numbers that you actively kept confidential.
Then there’s the “highly offensive” standard, which is subjective and unpredictable. A phone number on its own, without context that makes the disclosure harmful, may not clear that bar. Posting the number alongside a message inviting strangers to harass you, or attaching it to a site designed to draw abusive contact, gives the claim much more traction than a bare disclosure.
When Sharing a Number Is Part of Harassment
If someone gave out your number as part of a deliberate effort to cause you serious psychological harm, you may have a claim for intentional infliction of emotional distress. This tort doesn’t focus on privacy. It targets conduct so extreme and outrageous that it goes beyond all bounds of decency.
Courts set that bar deliberately high. You need to show the defendant acted in a truly extreme way (not merely rude or inconsiderate), intended to cause severe distress or acted with reckless disregard for that outcome, actually caused your distress, and that the emotional harm was severe and debilitating rather than temporary upset.
Giving out a phone number, standing alone, rarely qualifies. These claims gain traction when the disclosure is part of a larger pattern: posting your number on explicit websites, urging strangers to contact you, or coupling it with threats. Screenshots, threatening messages, medical records showing anxiety or depression, and witness statements all strengthen the case.
Some situations cross out of civil territory entirely. Under the federal stalking statute, using the internet, phone systems, or other interstate communication tools to engage in conduct that puts you in reasonable fear of bodily harm or causes substantial emotional distress is a federal crime punishable by up to five years in prison.1Office of the Law Revision Counsel. 18 U.S. Code 2261A – Stalking Posting someone’s number online to weaponize strangers against them — a common doxing tactic — can fall within the statute if the intent and resulting harm line up with what the law requires. Most states also have their own stalking, harassment, and cyberstalking laws. Prosecutors bring criminal charges, not you, but filing a police report also creates documentation that helps any civil case you file later.
When the Real Problem Is the Calls That Follow
For many people whose numbers get shared, the disclosure itself isn’t what causes ongoing harm. The wave of robocalls and spam texts is. Federal law offers the most practical remedy here. The Telephone Consumer Protection Act makes it illegal to send automated calls, robocalls, prerecorded messages, or automated text messages to your phone without your prior consent.2Office of the Law Revision Counsel. 47 USC 227 – Restrictions on Use of Telephone Equipment
The TCPA has real teeth. It provides statutory damages you can collect without proving actual financial loss: $500 per illegal call or text, and up to $1,500 per violation if the conduct was willful or knowing. Ten willful robocalls comes to $15,000. These cases can be filed in state court, and because damages accrue per violation, they add up quickly.
The TCPA doesn’t cover everything. It targets automated dialing systems, prerecorded voices, and mass texting platforms; a person manually dialing your number isn’t covered. And if you previously gave consent, even indirectly by writing your number on a form, you may need to revoke it in writing before violations start counting. Still, when someone shared your number with telemarketers or added it to a list feeding robocallers, the TCPA is often more viable than a privacy tort.
Separately, the National Do Not Call Registry lets you register your number for free and report violations when telemarketers call anyway.3National Do Not Call Registry. National Do Not Call Registry Charities, political groups, and debt collectors can still call, but commercial telemarketers face penalties for ignoring the list.
When a Business Is the One That Shared Your Number
The rules shift when the party that shared your number is a company rather than an individual.
Financial institutions — banks, lenders, insurers — are governed by the Gramm-Leach-Bliley Act, which restricts how they can share your nonpublic personal information with unaffiliated third parties. They have to notify you about their information-sharing practices and, in many cases, let you opt out.4Federal Trade Commission. How To Comply with the Privacy of Consumer Financial Information Rule of the Gramm-Leach-Bliley Act
About 20 states have enacted comprehensive consumer data privacy laws that give residents the right to know what personal information businesses collect, request its deletion, and opt out of its sale or sharing. These laws generally define personal information broadly enough to cover phone numbers. If a business in one of these states sold or shared your number without proper consent or opt-out mechanisms, you may have recourse through the state attorney general or, in some states, a private lawsuit.
The Telemarketing Sales Rule also prohibits businesses from selling or misusing the Do Not Call Registry and requires express informed consent before initiating telemarketing transactions.5Federal Trade Commission. Complying with the Telemarketing Sales Rule Violations can be reported to the FTC.
What You Can Actually Recover
What you can win depends on the theory you pursue.
Compensatory damages cover your actual losses. That splits into economic damages (money spent changing your number, lost wages, security measures) and non-economic damages (emotional distress, anxiety, reputational harm). Non-economic damages are legitimate but hard to quantify, and courts handle them inconsistently. Therapy records, medical bills, and written accounts of how the disclosure affected your daily life all help establish severity.
Punitive damages exist in theory but are rare in phone-number cases. They punish especially malicious or reckless conduct and typically require clear and convincing evidence rather than the usual preponderance standard. Many states cap them at a multiple of compensatory damages.
TCPA claims work differently and often more favorably: $500 per violation as statutory damages, up to $1,500 per willful violation, with no need to prove actual loss.2Office of the Law Revision Counsel. 47 USC 227 – Restrictions on Use of Telephone Equipment For someone getting dozens of automated calls, that adds up without documenting emotional harm.
A court can also grant injunctive relief, ordering the defendant to stop sharing your number or to take down a post that contains it. That matters most when the disclosure is ongoing.
Why Suing Isn’t Always Worth It
A few realities deserve honest weight before you file.
Litigation costs money. Filing fees run several hundred dollars, and attorney fees for privacy cases can reach thousands before you’re close to a courtroom. Unless damages are substantial, or a lawyer sees a viable TCPA case with per-violation statutory damages, finding contingency representation can be difficult. Small claims court is an option for lower-value disputes, though privacy tort claims involve legal complexity that’s hard to present without an attorney.
Privacy torts also have statutes of limitations. They vary by state but often fall in the one-to-three-year range. Wait too long and you lose the right to sue.
About 40 states have anti-SLAPP statutes that let defendants quickly move to dismiss lawsuits targeting protected speech. If the person who shared your number argues the disclosure was speech on a matter of public concern, they can file a motion to strike early. You’d then have to show a probability of winning. If you can’t and the case is dismissed, many anti-SLAPP laws require you to pay the defendant’s attorney fees.
Filing also makes the matter public. Court records are generally accessible, and the details of your complaint, including the number you’re trying to protect, become part of the public record. For some plaintiffs, the lawsuit causes more exposure than the original disclosure.
What to Do Before You File
Legal action is usually a last resort. Several lower-cost steps can either resolve things or build the record you’d need if you do sue.
Start by contacting the person who shared your number and asking them to stop, ideally in writing so you have documentation. People sometimes share contact information carelessly rather than maliciously, and a direct conversation is often enough.
If that doesn’t work, a cease and desist letter from an attorney formally demands the behavior stop and puts the other party on notice. The letter isn’t binding on its own, but it creates a paper trail showing you asked and were ignored, which helps if things escalate.
While you work through those steps, limit the fallout:
- Block unwanted numbers and use your phone’s built-in call filtering.
- Report harassment to your carrier, which may offer additional blocking or fraud tools.
- Register with the Do Not Call Registry at donotcall.gov if you haven’t already, and report violations after 31 days.3National Do Not Call Registry. National Do Not Call Registry
- Report threats or stalking to local law enforcement. A police report is both protective and evidentiary.
- Tighten privacy settings on social media and remove your number from public profiles.
- Document everything: screenshots, call logs, voicemails, and messages showing who shared your number and what happened afterward.
Documentation matters more than people expect. If you end up in court on any theory — privacy tort, IIED, or TCPA — your evidence has to tell a clear story: your number was private, someone disclosed it without permission, and specific harm followed. The stronger that record, the better your odds of a meaningful outcome.