Collegeboard shared my info without my consent. Anything I can do?

That sucks big time. College Board has always been a terrible company. I’m not an attorney and I need more time to review their privacy policy to give more sound advice. What you do next depends on how far you are willing to go. You may have more rights than you think. Your state might have laws or protections for deceptive opt-in practices. I’d search that for your state. If College Board violated their own privacy policy you have rights under consumer protection laws. If your actual education records were shared you have rights under Family Educational Rights and Privacy Act (FERPA) and can file a claim with the U.S. Department of Education. Decide how much work you want to do. Think about what you want to come out of this. Identify the harm they caused you. Create a log of every email, call times (and the phone numbers you called) and agents you spoke to, any relevant screenshots. Send a preservation of evidence demand letter to College Board first chance you get (email and certified mail requiring a signature) this discourages them from deleting call recordings. Separately request all of your call recordings, chats, customer relation management data, and list of institutions that received your data. Then file a complaint with the Better Business Bureau (BBB), Federal Trade Commission (FTC), and your state’s attorney general. If you only want them to respond to you, a message to the Better Business Bureau (BBB) should do the trick.