Data Brokers

What Are Data Brokers and Why Should You Care in 2026?

By Jonah Whitfield8 min read

Genuine TransUnion privacy-request fields for name and address, with entered personal details obscured. An illustration of personal-information fields, not a found profile.

Key takeaways

  • People-search sites are one type of data broker and may compile information from public records, public profiles, and other brokers.
  • A compiled report is not necessarily complete or accurate; verify identity and source before acting.
  • A site-specific opt-out can reduce one listing but does not erase all source records or downstream copies.
  • Read privacy requests and broker rules through official regulators because rights depend on jurisdiction and context.

What Exactly Is a Data Broker?

A data broker is a company that collects personal information about individuals from a wide range of sources, aggregates it into detailed profiles, and then sells or licenses that data to third parties. These third parties can be marketers, insurance companies, employers, landlords, or even ordinary individuals searching for someone online. Data brokers operate largely behind the scenes, and most people have never heard of the companies profiting from their information.

The data broker industry has grown into a massive global enterprise. According to industry research, there are now more than 4,000 data broker companies worldwide, with major players like Acxiom, Oracle Data Cloud, Experian, and LexisNexis generating billions in revenue. The total market was valued at approximately $250 billion in 2025, and it continues to grow as more of our daily activities move online.

What makes data brokers particularly concerning is that they operate with minimal oversight. Unlike banks or healthcare providers, most data brokers are not heavily regulated, and they have no direct relationship with the people whose data they sell. You never signed up for Spokeo or BeenVerified, yet these sites may have your home address, phone number, email, and even estimated income available for anyone to find.

How Data Brokers Collect Your Information

Data brokers use a combination of public and private sources to build profiles on individuals. Public records are a foundational data source, including property records, court filings, voter registrations, marriage and divorce records, and business filings. Every time you buy a home, register to vote, or appear in a court filing, that information becomes available to data brokers.

Beyond public records, data brokers harvest data from social media profiles, online surveys, loyalty programs, warranty registrations, and mobile apps that share location data. When you accept the terms of service on a free app or sign up for a store rewards card, you are often consenting to have your data shared with third-party brokers. Browser cookies, advertising networks, and device fingerprinting add yet another layer of tracking.

  • Public records: property deeds, voter registration, court filings, birth and marriage records
  • Commercial data: purchase histories, loyalty card transactions, warranty registrations
  • Online activity: social media profiles, browsing history via cookies, app usage data
  • Self-reported data: surveys, contest entries, newsletter signups
  • Location data: GPS data from mobile apps, Wi-Fi connection logs, check-ins

What Types of Data Are Being Sold?

The range of personal information available through data brokers is staggering. Basic identifying information like your full name, date of birth, current and past addresses, phone numbers, and email addresses are just the starting point. Brokers also compile financial data including estimated income, credit score ranges, property ownership details, and bankruptcy filings.

More invasive categories include health-related interests (inferred from purchases and browsing habits), political affiliations (from voter registration and donation records), religious affiliations, hobbies, and detailed family information including the names and ages of your children. Some brokers maintain records on over 250 million Americans, with individual profiles containing more than 1,500 data points each.

People-search sites like Spokeo, WhitePages, and Intelius make much of this data accessible to anyone for a small fee. A single search on BeenVerified can reveal your address history, phone numbers, email addresses, relatives, and even criminal records. This accessibility is what makes data brokers a significant privacy and safety concern.

The Business Model: How Brokers Profit from Your Data

Data brokers generate revenue through several channels. The most common is selling access to consumer databases through subscription services or per-record pricing. Marketers pay for targeted lists of consumers matching specific demographic profiles. An advertiser looking to reach homeowners aged 30-45 with household incomes above $100,000 can purchase exactly that list from a broker like Acxiom or Oracle Data Cloud.

People-search websites represent the consumer-facing side of the industry. Sites like Spokeo charge individuals between $1 and $25 for a single background check or people search. With millions of searches performed monthly, these sites generate substantial revenue. Meanwhile, enterprise clients like insurance companies, financial institutions, and background check services pay premium prices for bulk data access and API integrations.

What You Can Do to Protect Yourself

The most direct action you can take is opting out of data broker sites individually. Most major brokers are required to honor opt-out requests, though the process varies by site and can take anywhere from a few days to several weeks. You will need to visit each broker's website, locate their opt-out or privacy page, verify your identity, and submit a removal request.

However, manual opt-outs have significant limitations. There are thousands of data brokers, and removing yourself from even the top 20 can take 10-15 hours of work. Worse, brokers typically re-collect and re-list your data within 2-4 months, meaning the process must be repeated continuously. This is why many privacy-conscious individuals turn to automated data removal services like protectmydata, which continuously monitors and removes your information from hundreds of broker sites.

Beyond data removal, you can reduce your exposure by limiting the personal information you share online, using privacy-focused browsers, opting out of marketing communications, and regularly Googling yourself to see what information is publicly available. Every step you take to limit your data footprint makes it harder for brokers to build a complete profile.

What is a data broker?

A data broker collects or compiles information about people and provides it to others, though legal definitions and business models vary. The FTC describes people-search sites as a type of data broker: they build reports from sources that can include other brokers, public social profiles, and government public records. A consumer-facing lookup page is only one visible part of the ecosystem.

A profile may contain outdated details or combine records that belong to different people. Verify a match before treating a report as authoritative. Consider both the field and its source: an address from a public record, a number from a profile, and an inference from a commercial feed may require different correction routes.

Why can broker information matter?

A report that connects names, contact details, addresses, and possible associates can make a person easier to find or contact. That may facilitate unwanted outreach or make a deceptive message sound more convincing. Exposure alone does not prove fraud, but it is a reason to review what is visible and reduce details you do not need to publish.

Do not assume every broker sells every field to every buyer or uses it for the same purpose. The organization, context, and applicable law matter. When a page identifies an organization, read its privacy notice and current opt-out information rather than relying on a sweeping claim about the entire market.

What can a person do about a broker listing?

Save the exact profile URL, confirm it matches you, and use the site's official opt-out. The FTC explains that people-search sites often provide ways to ask them to stop selling information. Keep confirmation and check the listing again. If the data is inaccurate at its original source, use that source's correction process separately.

In California, the CPPA publishes information for data brokers and the state's deletion mechanisms. Other jurisdictions have their own rules. Check the regulator relevant to your location and the organization's role; no single request should be assumed to erase every copy.

What are the limits of data removal?

A broker opt-out addresses the covered broker's processing or listing within its process. Public records, another broker's report, a search index, and breach data may remain. Treat removal as targeted risk reduction and track the actual source rather than promising that anyone can be erased from the internet.

At a glance

Different data holders create different paths to action
Holder or sourceExamplePossible action
People-search brokerCompiled address reportUse that site's official opt-out
Public authorityProperty or court recordCheck the record holder's rules
Social platformPublic profile fieldsChange audience and remove source post
Search engineIndexed resultUse eligible search-index request separately

Review and reduce a broker profile

Find the profile and confirm its details match you rather than a namesake.

Save the exact URL and identify any source information shown.

Submit the site's official opt-out with only necessary verification.

Correct an inaccurate source record separately where appropriate.

Recheck the site and look for independent copies without assuming total erasure.

From collected detail to consumer action

A broker report may compile multiple sources, so a precise response follows the data path.

  • Public or commercial information
  • Collection by broker
  • Compilation into report
  • Searchable consumer listing
  • Site-specific opt-out or source correction

Frequently asked questions

Are data brokers the same as search engines?

No. A search engine indexes webpages, while brokers may collect and compile reports; the same information can appear in both.

Can a broker profile be inaccurate?

Yes. Verify the identity match and source before taking action.

Does opting out guarantee permanent deletion?

No. Separate sources, copies, and future collection may remain.

Sources

About the author

Investigations & Data Privacy. Jonah covers data-broker practices, the circulation of personal information, and practical ways people can understand and reduce their online exposure.

Browse all privacy guides

Free exposure scan

Is your personal info exposed?

Your personal information could be exposed without you knowing. Enter your email to check your exposure for free.

Free scan. No credit card required.