What Data Brokers Collect — and Where They Get It
Data brokers draw from a surprisingly wide variety of sources, many of them entirely public. Property records, voter registration files, court documents, and business license filings are all accessible and routinely harvested. On top of that foundation, brokers layer data purchased from retailers, app developers, and loyalty program operators to build increasingly detailed profiles.
A typical profile might include your full name, current and historical addresses, estimated household income, marital status, the make of car you drive, your magazine subscriptions, and inferences about health conditions based on purchasing behavior. Some brokers go further, appending social media activity, location data harvested from smartphone apps, and browsing patterns collected through advertising networks.
Understanding how this data originates starts with recognizing your own digital footprint — the trails left behind by everyday online activity that feed directly into broker databases.
Children's Data Is Also at Risk
Data brokers are not limited to adult profiles. Information about minors can enter broker databases through school-adjacent platforms, apps, and family accounts. Parents concerned about this issue may want to review how schools collect and share student data, since educational records represent one distinct but related exposure point.
Who Buys This Data and Why
The customer base for data broker products is broader than most people assume. Direct marketers are frequent buyers, using profile data to target advertising by age, income bracket, or inferred interest. But the list extends well beyond ad targeting.
Insurance companies have used third-party data to assess risk. Landlords and employers may run informal background research. Political campaigns purchase voter files enriched with consumer data to micro-target messaging. Financial institutions use it for fraud detection and credit-related screening. Some data broker products are sold to law enforcement agencies, a practice that has drawn increasing scrutiny from civil liberties advocates because it can allow investigators to access location or association data without obtaining a warrant.
The key point is that there is no single use case. The same profile can be licensed to many different buyers for many different purposes — and the individual whose data is involved has no visibility into those transactions in most circumstances.
4,000+
Estimated number of data broker companies operating in the US
The International Association of Privacy Professionals and various industry researchers have estimated the US data broker market includes several thousand companies, ranging from large public firms to small specialty operators.
$200B+
Estimated annual US data broker industry revenue
Industry analysts have estimated the broader data brokerage and data marketplace sector generates hundreds of billions of dollars annually, though precise figures vary by how the industry boundaries are defined.
~240
Data points in an average consumer profile
Privacy researchers and journalists investigating major broker databases have found that individual profiles can contain hundreds of distinct data attributes, covering demographics, behavior, finances, and inferred characteristics.
The Regulatory Landscape in the United States
Unlike the European Union, which enacted a comprehensive data protection law (GDPR) in 2018, the United States has no single federal law governing data brokers. Instead, a patchwork of sector-specific rules applies in narrow contexts. The Fair Credit Reporting Act regulates how consumer report data can be used — but standard data broker profiles generally fall outside its scope. For a closer look at how credit-specific data collection works under stricter rules, the US credit bureau system offers useful contrast.
At the state level, California's privacy laws give residents the clearest opt-out rights, including a specific Data Broker Registry maintained by the state. Virginia, Colorado, Connecticut, and Texas have passed their own frameworks with varying consumer rights. But even in regulated states, enforcement resources are limited and compliance is inconsistent across the industry.
Federal legislation has been proposed but has not yet passed into law, leaving a significant gap between how consumers believe their data is protected and how it is actually handled.
What You Can Do to Limit Your Exposure
Reducing your presence in data broker databases requires persistent effort rather than a one-time fix. The most direct route is submitting opt-out requests to individual brokers — major players such as Spokeo, Whitepages, BeenVerified, and LexisNexis all have removal procedures, though each differs in steps and verification requirements. Submitting requests across dozens of brokers can take hours, and profiles often reappear after a few months as databases refresh.
Upstream habits matter too. Reviewing the permissions granted to smartphone apps, avoiding unnecessary account creation on retail sites, and being selective about what you share on social media all reduce the raw material available to brokers. Many common privacy beliefs — such as assuming private browsing prevents tracking — do not hold up against the data broker model.
For a broader foundation, practical online privacy habits can meaningfully reduce exposure over time. And if you use AI-powered apps, it is worth understanding the privacy trade-offs those tools involve, since that data can also flow into third-party ecosystems.
Start With the Largest Brokers First
If submitting opt-out requests individually, prioritize people-search sites and large aggregators before smaller niche brokers — these tend to be the most frequently accessed by third parties. Document each submission with a date so you can track when to resubmit, since most brokers will re-aggregate your data within six to twelve months.
Frequently Asked Questions
In most of the United States, yes. Federal law does not broadly prohibit the sale of personal data. A few states — including California, Virginia, and Colorado — have passed privacy laws that give residents opt-out rights, but coverage is uneven and enforcement is still developing.
Profiles commonly include your full name, current and past addresses, phone numbers, email addresses, estimated income, homeownership status, purchasing habits, political affiliation, and inferred health interests. Some brokers also aggregate data from social media activity and location signals.
Most major brokers offer an opt-out process, but each has its own procedure and you must submit requests individually. Some privacy-focused services automate this on your behalf. Even after removal, your data can reappear as brokers refresh their databases from new sources.
Buyers include advertisers, insurance companies, financial institutions, employers conducting background checks, political campaigns, real estate platforms, and in some cases law enforcement agencies. The range of buyers is broad and not always disclosed to individuals.
They overlap but are not identical. Credit bureaus like Equifax, Experian, and TransUnion are regulated specifically under the Fair Credit Reporting Act and focus on creditworthiness data. Data brokers operate under fewer restrictions and collect a much wider range of personal information.
Completely preventing collection is difficult given how much information flows through public records and third-party platforms. However, limiting social media oversharing, reviewing app permissions, and using privacy-focused browsers can meaningfully reduce the data you generate.
The content on this site is for informational purposes only and is not a substitute for professional advice. Always consult a qualified professional for guidance specific to your situation.