Data Broker
A data broker is a company that collects personal information about individuals from a wide range of public and private sources, compiles it into detailed profiles, and sells or licenses that information to third parties. These businesses operate largely in the background — consumers typically have no direct relationship with them. The buyers of this data include advertisers, employers, insurers, lenders, and even other data brokers.
Data brokers are sometimes categorized as either 'people-search' sites (which sell profiles directly to consumers) or business-to-business data providers (which supply aggregated datasets to commercial clients). Both types are subject to different state-level regulations in the US.

What Data Brokers Actually Know About You

The depth of a data broker profile often surprises people who encounter one for the first time. It's rarely just a name and address. A compiled profile may include your current and past home addresses, phone numbers, email addresses, estimated income range, employment history, relatives and household members, property ownership records, vehicle registrations, and purchasing behavior across categories like health products, travel, and financial services.

Beyond the factual data, brokers also assign inferred attributes — predictive labels such as "likely diabetic," "politically active," or "high credit risk" — based on behavioral signals. These inferred categories are particularly consequential because they can affect how third parties treat you without your knowledge.

Understanding your broader digital footprint is the first step to grasping why these profiles are so detailed. Every online interaction — a search, a purchase, an app download — contributes raw material that brokers can acquire and interpret.

4,000+

Estimated active data brokers in the US

Privacy researchers and advocacy groups estimate there are more than 4,000 companies operating as data brokers in the United States, though comprehensive registration requirements are limited.

$280B+

Annual US data broker industry revenue

The data brokerage industry generates hundreds of billions in annual revenue globally, reflecting the commercial value placed on detailed consumer profiles.

~100

Sources per consumer profile (estimated)

Industry analysts suggest a single consumer profile may draw from dozens to hundreds of distinct data sources, including public records, purchase history, and behavioral signals.

Where Data Brokers Get Their Information

Data brokers draw from an expansive network of sources, which is why their profiles can feel unnervingly complete. The main categories include:

  • Public records: Court documents, property deeds, marriage and divorce records, voter registration files, and business licenses are all accessible and heavily mined.
  • Retail and loyalty programs: When you use a store loyalty card or create a retail account, your purchasing data is often licensed to third parties as a condition of the program.
  • App and website tracking: Mobile applications frequently collect location data, browsing behavior, and device identifiers. Websites use cookies and tracking pixels to build cross-site behavioral profiles.
  • Social media: Publicly visible profile information, interests, and engagement signals feed into broker datasets. Reviewing your social media privacy settings can reduce how much of your activity is available for this kind of collection.
  • Smart devices: Connected home devices generate usage data that may be shared with affiliated data partners. Understanding smart device privacy before purchase helps limit unwanted data sharing.

Data Brokers Are Not the Same as Credit Bureaus

Credit bureaus (Equifax, Experian, and TransUnion) are a specific, federally regulated category of consumer reporting agency governed by the Fair Credit Reporting Act (FCRA). Data brokers operate under a different and generally less stringent legal framework. Opting out of data broker databases does not affect your credit file, and disputing credit report errors requires a separate process through the bureaus directly.

How the Opt-Out Process Works — and Its Limits

Most data brokers are required — either by law or self-regulatory standards — to provide an opt-out mechanism. In practice, the process varies considerably between companies. Some offer a straightforward web form; others require you to submit a government-issued ID to verify your identity before processing a removal request. A handful make the process deliberately difficult to navigate.

The general steps are consistent across brokers:

  1. Search the broker's site for your profile using your name and location.
  2. Locate the opt-out or "do not sell my information" link, often in the footer.
  3. Submit the required form, which may ask for an email address to confirm the request.
  4. Confirm via email if prompted, and record the date of your submission.

Critically, opt-outs are broker-specific. There is no universal opt-out registry in the United States at the federal level, although some states are exploring centralized mechanisms. If you want to understand the key privacy terms involved in this process, our plain-language glossary of privacy terms is a helpful reference.

It's also worth knowing that your data can have real downstream effects beyond advertising. As explored in our article on how insurers determine your risk profile, third-party consumer data sometimes plays a role in underwriting and eligibility assessments.

Start Your Opt-Out With the Largest Brokers First

Because hundreds of data brokers exist, it's impractical to contact all of them at once. Prioritize the largest and most widely used people-search and marketing data companies first, as these are most likely to have sold your profile downstream. Keep a simple spreadsheet logging each broker, the date you submitted your opt-out, and the confirmation you received. This record helps you track re-emergence and follow up if a request is ignored.

What Consumer Rights Exist Today

The United States does not yet have a single comprehensive federal privacy law comparable to the European Union's General Data Protection Regulation (GDPR). However, a growing number of states have enacted consumer privacy legislation that grants residents specific rights.

California's Consumer Privacy Act (CCPA) and its successor the CPRA are among the most robust, giving Californians the right to know what data is collected, request deletion, and opt out of the sale of their data. Virginia, Colorado, Texas, and other states have enacted similar — though not identical — frameworks. Residents of those states can submit formal deletion requests that brokers are legally required to honor within defined timeframes.

For consumers in states without such laws, the opt-out process remains largely voluntary on the broker's part, though industry self-regulatory bodies like the Data & Marketing Association maintain opt-out programs that participating companies are expected to honor.

No legal framework currently guarantees complete erasure, and enforcement varies. Treating opt-outs as a meaningful but imperfect layer of protection — rather than a definitive solution — is the most realistic posture.

Frequently Asked Questions

In most of the United States, yes — data brokerage is generally legal under current federal law. However, several states have passed privacy laws that give residents rights to access, correct, or delete their data. Laws like the California Consumer Privacy Act (CCPA) are among the strongest protections currently available to US consumers.

Much of the data comes from sources that are technically public or from agreements buried in privacy policies you accepted. Public records (court filings, property records, voter registrations), retailer loyalty programs, mobile app permissions, and website tracking all feed into broker databases — often without explicit, specific consent from the individual.

No. Each data broker maintains its own database and has its own opt-out process. Removing yourself from one has no effect on others. Because there are hundreds of active data brokers in the US, opting out individually is a significant time investment.

Potentially, yes. Some insurers use third-party data to help assess risk profiles. Consumer-interest categories, purchasing behavior, and even social media activity can factor into models that influence pricing or eligibility. For more on how this works, see our related article on how insurers determine your risk profile.

Opt-outs are not permanent in most cases. Data brokers can re-acquire your information from new sources over time, meaning your profile may be rebuilt months after you removed it. Periodic re-checking — many privacy advocates suggest every six to twelve months — is generally recommended.

Yes, a number of subscription-based and free services submit opt-out requests on your behalf across multiple brokers. These services vary in coverage and effectiveness, and none can guarantee complete removal. They are a time-saving option, but consumers should understand their limitations before relying on them entirely.

Share

Tech & Electronics Editorial Team · Contributor

Tech & Electronics Editorial Team is the collective byline for our editorial team and contributor network. Articles published under this byline or an editorial pen name are researched, written, and reviewed according to our editorial standards for clarity, consistency, and independence before publication.

The content on this site is for informational purposes only and is not a substitute for professional advice. Always consult a qualified professional for guidance specific to your situation.