Key Takeaways
- Data brokers collect personal information from public records, social media, loyalty programs, and many other sources.
- Most Americans have detailed profiles in multiple broker databases without ever consenting directly.
- The data broker industry generates billions of dollars in annual revenue selling consumer profiles.
- You can opt out of many brokers individually, though the process is time-consuming and must be repeated periodically.
- Several US states have enacted privacy laws that give residents more rights over their personal data.
Data Broker
A data broker is a company that collects personal information about individuals from a wide range of sources, compiles it into detailed profiles, and sells or licenses that information to other businesses or individuals. This happens without most people ever knowing their information is being traded. The industry operates largely legally in the United States, with minimal federal oversight.
Data brokers are sometimes categorized into three segments: marketing and analytics brokers, people-search sites, and risk-mitigation brokers used for background checks or fraud detection.
Where Does the Data Come From?
Data brokers don't hack into systems to get your information — they gather it from places that are already accessible or commercially available. Sources include:
- Public records: Court documents, property deeds, voter registration files, marriage and divorce records, and business filings are all public in most US states.
- Online activity: Browsing behavior, app usage, and social media activity — including data shared through tracking pixels and cookies — feed into broker datasets.
- Commercial transactions: Loyalty program memberships, warranty registration cards, and retail purchase histories are commonly sold to brokers.
- Other data brokers: Brokers buy from and sell to each other, which means a single data point can spread across dozens of companies quickly.
Understanding how this data originates is closely connected to your broader digital footprint — the cumulative trail every online action creates over time.
$317B+
Estimated US data broker industry annual revenue
The data broker and data analytics market is estimated to generate hundreds of billions annually across the US, according to industry research organizations tracking the sector.
4,000+
Data broker companies operating in the US
Privacy advocacy organizations estimate there are more than 4,000 companies in the US engaged in collecting and selling consumer data in some form.
~72%
Americans unaware their data is being sold
Surveys by consumer advocacy groups consistently find that a large majority of US adults are unaware of how extensively their personal data is bought and sold commercially.
What Gets Built From That Data?
Individual pieces of information become far more powerful when combined. A broker might link your name and address from a property record, your political affiliation from voter registration data, your approximate income from consumer spending surveys, and your health interests inferred from product purchases. The resulting profile can be surprisingly detailed.
These profiles are categorized and scored — sometimes using labels like "likely homeowner," "diabetes interest," or "financial distress indicator" — and then licensed to clients who use them for targeted advertising, credit and insurance underwriting, tenant screening, and other purposes.
“Data brokers operate in the shadows of the digital economy. Most people have no idea how much information about them is being bought and sold, or how that information shapes the opportunities they're offered.”
— Pam Dixon, Executive Director, World Privacy Forum
People-search websites make a version of this data directly accessible to anyone willing to pay a small fee or sometimes for free, raising particular concerns about stalking, harassment, and identity theft.
The Regulatory Landscape in the US
The United States does not have a single comprehensive federal privacy law governing data brokers. Existing federal statutes cover narrow slices: the Fair Credit Reporting Act (FCRA) regulates brokers whose data is used for credit, employment, or housing decisions, and the Children's Online Privacy Protection Act (COPPA) protects children under 13. Outside those boundaries, the industry operates with broad freedom.
State laws have stepped into that gap. California's Consumer Privacy Act (CCPA) and its successor, the California Privacy Rights Act (CPRA), give state residents the right to know what data is held about them, request deletion, and opt out of data sales. Several other states have passed similar legislation. Vermont was among the first states to require data brokers to register with the state annually, creating at least a public list of who is operating.
FCRA protections have specific limits
The Fair Credit Reporting Act applies only when consumer data is used for credit, employment, housing, or insurance decisions. If a broker sells your data for marketing purposes, FCRA generally does not apply — meaning fewer federal protections cover the majority of data broker activity.
State privacy rights vary significantly
Consumer data rights differ considerably depending on where you live. Residents of California, Colorado, Connecticut, Virginia, and a growing list of other states have statutory opt-out rights; residents of other states may have none. Checking your state's current privacy law is the most reliable way to understand your specific rights.
Legislation continues to evolve, so checking your state's attorney general website for the most current consumer privacy rights is always a sound step.
What You Can Do Right Now
Opting out of data broker databases is possible, but it requires sustained effort. Here's a practical approach:
- Start with people-search sites. Search your own name on major people-search sites and use each site's opt-out or removal form. Results typically take a few days to a few weeks to disappear.
- Target the large aggregators. A handful of large data brokers supply data to many downstream companies. Removing yourself from aggregators can reduce your exposure across the ecosystem.
- Revisit periodically. Data re-accumulates. Setting a reminder to audit your presence every six months helps prevent profiles from rebuilding unnoticed.
- Minimize future data generation. Reviewing your social media privacy settings and being selective about loyalty programs and app permissions reduces the raw material brokers collect going forward.
Create a dedicated opt-out email address
When submitting opt-out requests to data brokers, consider using a dedicated email address rather than your primary one. Some brokers confirm requests via email, and using a separate address helps you track which opt-outs are pending and avoids linking your main inbox to even more data sources.
For a structured approach to reviewing what's out there about you, the practical online presence audit is a helpful next step after understanding the data broker landscape.