50 billion annually and operates with minimal regulation. These figures reveal the true scale of personal data commerce and what it means for your privacy."> 50 billion annually and operates with minimal regulation. These figures reveal the true scale of personal data commerce and what it means for your privacy."> 50 billion annually and operates with minimal regulation. These figures reveal the true scale of personal data commerce and what it means for your privacy.">Data Broker Industry: Key Facts and Figures for 2026 | Protect My Data
Data Brokers

Data Broker Industry: Key Facts and Figures for 2026

By Jonah Whitfield6 min read

The retained article's broad 2026 industry scale and revenue statements need their original sources and definitions checked before they are presented as facts.

Key takeaways

  • A data broker generally gathers personal information from multiple sources and sells or shares reports, but companies and legal obligations differ.
  • A people-search site is one visible kind of broker; marketing and analytics uses may be less visible to an individual.
  • Public records and commercial data can be combined, so removing one visible listing may not address the source.
  • Verify any industry-size, revenue, or record-count claim against a named, dated methodology before repeating it.

The Scale of the Data Broker Industry

The data broker industry is one of the largest and least understood sectors of the global economy. Major players include companies like Acxiom, Experian, Oracle Data Cloud, and LexisNexis, all multi-billion-pound enterprises that sell personal data as a core business. Alongside these giants, thousands of smaller operators run people-search websites, background check services, and marketing data platforms.

Together, these companies maintain profiles on virtually every adult in the developed world. This article does not provide a verifiable source for the consumer and profile-data counts attributed to Acxiom. The aggregate value of this data, which includes not just contact information but behavioural, financial, and predictive data, is what makes the industry so financially significant.

Revenue Models and Data Uses

Data brokers generate revenue through several distinct business models. Consumer-facing people-search sites charge individuals small fees for access to background reports. Marketing data companies sell audience segments to advertisers and brands. Risk assessment companies sell creditworthiness and fraud detection data to lenders and insurers. Investigative data companies sell research tools to law firms, journalists, and private investigators.

Your personal data may be sold to any or all of these buyer types without your knowledge or consent. This article does not establish how often an individual data point is sold or transferred.

Regulation and the Road Ahead

Privacy and data-broker rules differ by jurisdiction and change over time. This article does not establish the current scope of federal, state, or UK requirements or enforcement; consult current official legal guidance.

The regulatory landscape is changing, albeit slowly. Consumer pressure, high-profile data breach cases, and cross-party political support for privacy legislation are driving new rules forward. In the meantime, the practical tools available to individuals are opt-out requests, ongoing monitoring services, and good personal data hygiene.

What counts as a data broker?

The FTC describes people-search sites as a type of data broker: they compile information from sources including other brokers, publicly viewable social profiles, and government public records, then sell reports. The category is not a single uniform business model. Some services expose consumer-facing lookup pages, while other data products are marketed to businesses.

Because collection sources and uses differ, an industry-wide number needs a definition: which companies, data types, countries, and reporting period were counted? The baseline article uses a 2026 framing, but no independently verifiable methodology for its broad scale and revenue claims is supplied here. Do not treat an unsourced headline number as a measured fact.

How can personal information move through the ecosystem?

A public record or profile may be gathered, combined with a commercial source, packaged into a report, and then passed to another service. A person may see only the final people-search result and not the underlying transfer. A data point can also be outdated, incorrectly matched, or copied by another broker, so a profile should not be treated as authoritative simply because it appears in a compiled report.

For a practical response, identify the visible listing, its source, and the site's removal route. If the information originated in a source you control, correct it there as well. Rights and broker duties vary by location and data use; official regulator guidance is more reliable than a generalized claim that every person can demand deletion in every case.

What do broker opt-outs change?

An opt-out can limit a particular broker's sale or display of a matched profile according to that site's process. It does not necessarily remove a government record, delete another company's copy, or prevent future collection. California residents can consult the CPPA's current information for data brokers and the state's deletion mechanisms, while people elsewhere should check their own regulator's rules.

How should industry claims be read?

Look for a source, publication date, geographic scope, and a description of how the number was calculated. Distinguish company revenue from market estimates, profiles from unique individuals, and registered brokers from every organization that handles personal data. Without those definitions, a statistic may appear precise while answering no clear question.

At a glance

Interpret industry descriptions carefully
Claim or activityWhat to establishPractical implication
Broker countDefinition, registry, geography, and dateDo not equate a registry with every data handler
Profile volumeUnique people or records; deduplication methodOne person may have multiple entries
Data sourcePublic, commercial, user-provided, or inferredDifferent source may need a different remedy
Opt-out resultSpecific controller and request scopeOne site action does not erase all copies

Audit a data-broker claim or listing

  1. Ask who published the claim, when, and how the population or market was defined.
  2. For your own exposure, save the precise people-search URL and visible data fields.
  3. Use the broker's official opt-out and retain its confirmation or response.
  4. Correct a source record separately if you control it and the correction is appropriate.
  5. Check relevant official privacy guidance for your jurisdiction and type of data use.
How a consumer-visible profile may be assembledA compiled report can combine sources, but it does not prove every copied field is accurate.
How a consumer-visible profile may be assembledA compiled report can combine sources, but it does not prove every copied field is accurate.Public or commercial sourceBroker collectionRecord matching and compilationReport or searchable listingSource-specific correction oropt-out

Frequently asked questions

Are all companies that use personal data data brokers?

No. The term has particular meanings in law and practice; company activity and applicable definitions need to be checked.

Does an opt-out delete the public record?

Not usually. It addresses a broker's handling of a listing, not necessarily the original record.

Can I rely on industry-wide broker statistics?

Only when the source, date, geography, and counting method are clear and relevant.

Sources

About the author

Investigations & Data Privacy. Jonah covers data-broker practices, the circulation of personal information, and practical ways people can understand and reduce their online exposure.

Browse all privacy guides

Free exposure scan

Is your personal info exposed?

Your personal information could be exposed without you knowing. Enter your email to check your exposure for free.

Free scan. No credit card required.