Key Takeaways
Data Broker
A data broker is a company that collects personal information about people — often from dozens of different sources — and then packages and sells that information to other businesses or individuals. They operate mostly behind the scenes, meaning most Americans have never heard of them despite being profiled by them. The information they sell can include your name, address, income estimate, purchasing habits, health interests, and much more.
Data brokers are distinct from first-party data collectors (like your bank or doctor) because they have no direct relationship with the individuals they profile. They are sometimes called 'information resellers' or 'consumer reporting agencies' depending on how their data is used.
Where Does the Data Come From?
Data brokers don't collect your information in one dramatic swoop — they piece it together from dozens of mundane sources you interact with every day. The result is a surprisingly detailed profile built without you ever knowingly participating.
Major source categories include:
- Public records: Property deeds, voter registrations, court records, marriage and divorce filings, and business licenses are all publicly available and routinely harvested.
- Purchase history: When you use a store loyalty card or shop online, your transaction data is often sold or licensed to brokers.
- Online behavior: Websites embed cookies and tracking pixels that log which pages you visit, how long you linger, and what you click.
- Mobile apps: Apps that request access to your location, contacts, or camera can share that data with third-party brokers, often buried in lengthy terms-of-service agreements.
- Social media: Publicly visible posts, profile details, and engagement patterns feed into broker databases.
Your digital footprint — every search, click, and login — contributes to a profile you may not know exists.
Data Brokers vs. Your Direct Contacts
Data brokers are different from companies you have a direct relationship with, like your bank, doctor, or phone carrier. Those organizations are subject to specific sectoral privacy laws (like HIPAA for health data). Data brokers operate in a separate, less regulated space, collecting information you never intentionally shared with them.
How Brokers Build and Sell Profiles
Collecting raw data is only the first step. Data brokers invest heavily in data matching — the process of linking records from separate sources to a single individual. If your name and ZIP code appear in a retail database and a voter roll, algorithms can merge those records into one profile even if the data was never intended to be combined.
Finished profiles are sorted into audience segments with labels like "likely homeowner," "diabetes-interested," or "politically active." These segments are then licensed or sold to a range of buyers:
- Advertisers targeting specific demographics
- Insurance companies assessing risk
- Landlords and employers running background checks
- Political campaigns crafting messaging strategies
- Law enforcement agencies seeking leads
4,000+
Data broker companies operating in the U.S.
Industry estimates suggest several thousand companies qualify as data brokers, though exact figures vary by definition used.
$200B+
Estimated annual U.S. data broker industry revenue
Various industry analysts have estimated the global data brokerage market at hundreds of billions of dollars annually, with the U.S. as the largest single market.
~300
Data points held per average consumer profile
Research by the Privacy Rights Clearinghouse and similar organizations suggests large brokers may hold hundreds of distinct data points on individual Americans.
Dating apps are a notable source of intimate data. As explained in our piece on what dating apps actually do with your data, many platforms share behavioral and preference data with third parties — data that can eventually reach broker pipelines.
“The data broker industry is largely invisible to consumers, yet it touches nearly every aspect of American life — from the ads we see to the prices we're charged and the opportunities we're offered.”
— Federal Trade Commission, U.S. consumer protection and antitrust agency, from its report on the data broker industry
The Regulatory Landscape
The United States does not have a single comprehensive federal privacy law governing data brokers. Instead, a patchwork of sector-specific rules and state laws applies. The Fair Credit Reporting Act (FCRA) regulates brokers when their data is used for credit, employment, or housing decisions, but leaves many other uses unregulated.
State-level laws have moved faster. California's Consumer Privacy Act (CCPA) and its expanded version (CPRA) give California residents the right to know what data is held on them, request deletion, and opt out of sales. Virginia, Colorado, Connecticut, and Texas have passed similar frameworks. A growing number of states require data brokers to maintain public registries.
Check State Privacy Laws Before Opting Out
If you live in California, Virginia, Colorado, Texas, or Connecticut, you may have legally enforceable rights to request data deletion — not just voluntary opt-outs. Visit your state attorney general's website to understand what rights apply to you. These legal channels often carry more weight than informal opt-out forms.
Even under existing law, enforcing your rights requires effort. Most opt-out processes are intentionally manual: you must visit each broker's website individually, submit a form, and sometimes verify your identity — a process that can take hours across dozens of companies.
Practical Steps to Limit Your Exposure
Eliminating your data broker presence entirely is not realistic for most people, but meaningfully reducing it is achievable with consistent habits.
- Audit app permissions: Review which apps have access to your location, microphone, or contacts. Revoke access you don't actively use.
- Use opt-out tools: Many brokers publish opt-out forms. Working through major people-search sites systematically is a reasonable starting point.
- Minimize public records exposure: In some states, you can request that your voter registration address be withheld from public databases.
- Be selective with loyalty programs: The discounts come at the cost of detailed purchase-history data.
- Understand what your ISP sees: Your internet provider may also sell browsing data in some contexts — our article on what ISPs can actually see explains this in detail.
No single action eliminates the problem, but layering these habits substantially reduces the richness of the profile brokers can build on you.