Tech

Personal Data Brokers: What They Collect, Why They Sell It, and How to Opt Out

Data brokers profit from your personal information without your direct knowledge. Learn what they gather and what your removal options are.

Personal Data Brokers: What They Collect, Why They Sell It, and How to Opt Out

Photo: ReadersChronicle.com | Your Comprehensive Learning Destination editorial

—— In This Article
  1. Where Data Brokers Get Your Information
  2. Why the Data Broker Industry Exists
  3. How to Opt Out of Data Broker Databases
  4. Your Legal Rights and Where They Fall Short

Key Takeaways

  • Data brokers collect personal information from public records, online activity, and third-party sources without directly notifying you.
  • The information they sell can include your name, address, income range, health interests, and purchasing habits.
  • You can request removal from many data broker databases, though the process requires effort and repetition.
  • Some U.S. states have laws giving residents stronger opt-out rights; federal protections remain limited.
  • Regularly auditing your digital footprint reduces how much brokers can collect about you going forward.

Where Data Brokers Get Your Information

Data brokers piece together personal profiles from dozens of overlapping sources. Much of what they collect is technically public: voter registration records, property ownership documents, court filings, and business licenses are all accessible through government agencies. Brokers systematically harvest these records at scale.

They also obtain data through commercial channels. Retailers sell purchase histories, apps share location signals, and loyalty programs pass along detailed spending patterns — often disclosed in lengthy terms-of-service agreements that few consumers read in full. Online activity, including browsing behavior and social media interactions, adds another layer.

The result is a profile that can include your full name, current and past addresses, phone numbers, email addresses, estimated income, household composition, vehicle ownership, health-related interests inferred from purchases, and political or religious affiliations derived from public records. As our guide on how personal information leaks online without hacking explains, many of these exposures happen through ordinary daily actions rather than security failures.

4,000+

Estimated data broker companies in the U.S.

The Privacy Rights Clearinghouse and industry analysts have estimated that thousands of companies operate in the data broker space, ranging from large consumer data firms to niche resellers.

$200B+

Estimated annual U.S. data broker industry revenue

Various market research estimates have placed the total revenue of the broader data and analytics brokerage industry in the hundreds of billions of dollars annually, though figures vary by how the industry is defined.

~1,500

Data points collected per consumer profile by some brokers

Privacy researchers have documented cases where major data brokers maintain profiles containing hundreds to over a thousand individual data attributes per person.

Why the Data Broker Industry Exists

Personal data is commercially valuable. Advertisers pay to reach specific consumer segments. Employers and landlords may use background-screening services that draw on broker databases. Financial institutions analyze consumer profiles to assess risk. Political campaigns purchase voter data to target outreach. Each of these use cases creates demand that sustains a multi-billion-dollar industry.

Brokers profit precisely because they operate in aggregation. A single piece of data — your ZIP code — is worth little on its own. But combined with purchasing history, estimated income, and lifestyle inferences, it becomes a marketable profile. Brokers sell access to these profiles repeatedly, to many buyers simultaneously, multiplying revenue from the same underlying data.

“Data brokers know more about you than your closest friends — and they've never met you. The business model depends on consumers not knowing this market exists.”

— Pam Dixon, Executive Director, World Privacy Forum

It's worth noting that not all broker activity carries the same risk. Some brokers primarily serve marketers; others supply data used in legally regulated contexts like employment screening, where FCRA rules apply and consumers have specific dispute rights. Understanding which category a broker falls into matters when deciding how to respond.

How to Opt Out of Data Broker Databases

Opting out is possible but requires sustained effort. Most major people-search and data broker sites maintain an individual opt-out process, typically found in their privacy policy or a dedicated removal page. The process usually involves submitting your name, location, and sometimes a copy of a government-issued ID to verify your identity before a removal request is processed.

Start with the Largest People-Search Sites

Prioritize opt-out requests to the highest-traffic people-search platforms first — these are the most likely to surface when someone searches your name. Look for 'Do Not Sell My Information' or 'Opt Out' links in each site's footer or privacy policy. Document your requests with screenshots and the date submitted so you can follow up if the listing reappears.

Because there are hundreds of brokers operating in the U.S., manually submitting requests to each one is time-consuming. Some privacy-focused services automate this process on your behalf, though it's worth understanding what access you grant to any tool you use for that purpose — you'd be sharing personal data to reduce personal data exposure, which carries its own trade-offs.

Beyond opt-outs, reducing future data collection matters. Limiting the personal details you share with apps, opting out of data-sharing within loyalty programs, and reviewing app permissions on your devices all shrink the pipeline brokers rely on. These steps won't erase existing profiles, but they slow how quickly new ones rebuild after removal.

Consumer rights in this area vary significantly depending on where you live. California's privacy law gives residents the right to know what data brokers hold about them, request deletion, and opt out of data sales. Several other states have passed similar laws. However, as of this writing, no comprehensive federal data broker law applies to all U.S. residents equally.

The Fair Credit Reporting Act (FCRA) provides some protections specifically when data is used for credit, employment, insurance, or housing decisions — contexts where inaccurate information can cause direct, measurable harm. Consumers have the right to dispute inaccurate information in these contexts. Outside of FCRA-covered uses, federal protections are narrower.

Advocacy organizations including the Electronic Frontier Foundation and the Federal Trade Commission (FTC) have called for stronger oversight of the data broker industry. The FTC publishes consumer guidance on data broker opt-outs that is worth consulting for current information on your options.

This article provides general educational information about data brokers and consumer privacy. It is not legal advice. For guidance specific to your situation or jurisdiction, consult a qualified privacy attorney or your state's attorney general office.

Frequently Asked Questions

In most U.S. states, yes — data brokers operate legally by gathering publicly available information and combining it with data obtained through commercial agreements. However, some states like California, Virginia, and Colorado have enacted laws giving residents specific rights to opt out. Federal law provides narrower protections, mainly for credit reporting contexts.
You can search your name on major people-search sites to see what's publicly listed. Privacy-focused organizations such as the Electronic Frontier Foundation (EFF) and state attorneys general offices sometimes publish lists of known brokers. Some states with data privacy laws allow residents to request disclosure of what information a broker holds.
Not necessarily. Brokers continuously ingest new data, so your profile can reappear even after a successful removal. Most experts recommend revisiting opt-out requests every few months. Removing data from one broker does not affect others — each must be addressed separately.
Aggregated personal profiles have been associated with risks including targeted scams, phishing attacks, and doxing (the public exposure of private information). Reducing your data broker presence lowers — but does not eliminate — these risks. Staying alert to suspicious contacts remains important regardless of opt-out efforts.
Children's data is supposed to receive stronger protections under federal law (COPPA applies to children under 13), but gaps exist. Parents concerned about their children's digital footprint can find practical guidance in our article on children's online privacy and safety.
A data breach is an unauthorized theft of data, typically from a hacked system. Data brokers, by contrast, collect and sell information through legal — if often opaque — commercial channels. Both can result in your personal details being widely accessible, but through very different mechanisms.
Tech Editorial Team

Tech Editorial Team

Tech Editorial Team is the collective byline for our editorial team and contributor network. Articles published under this byline or an editorial pen name are researched, written, and reviewed according to our editorial standards for clarity, consistency, and independence before publication.

View author profile
The content on this site is for informational purposes only and is not a substitute for professional advice. Always consult a qualified professional for guidance specific to your situation.