What a data broker is
A data broker is a company whose business is collecting information about people, organizing it and licensing or selling it to others. They are sometimes called information resellers or list companies. Most people have no direct relationship with them. You did not sign up, and you may never have heard of the firms holding records about you.
The industry is varied. Some brokers serve marketers, some provide people-search websites, some support fraud prevention or identity checks, and some supply data to lenders, insurers, landlords or employers within the limits of the law. The size and practices of the industry are hard to measure, and estimates of the number of companies differ, so it is best to treat precise counts with caution.
Where the information comes from
Brokers typically combine several types of sources.
Public records. In many places, property records, court filings, voter registration (where permitted), business registrations and professional licenses are open to the public. Which records are public, and what they contain, varies by country and by region.
Commercial sources. Retailers, loyalty programs, magazine subscription lists, warranty cards and surveys may share or sell customer information, depending on what their privacy policies say and what the law allows.
Online activity. Advertising networks, apps and websites can provide data about browsing and app usage. Some of this relies on the identifiers described in the article on browser cookies, and some comes from software inside phone apps. Location information from phones has been a notable and controversial source, which is discussed under location tracking.
Other brokers. Companies buy from each other, so data can pass through several hands. This makes it difficult to trace a record back to its origin.
Self-reported or inferred data. Surveys and quizzes supply stated information, while statistical models estimate things such as household income, interests or likely life events.
What a profile can contain
The content varies by broker and by region, but profiles can include name, current and past addresses, phone numbers, email addresses, approximate age, household members, education, property ownership, vehicle information and consumer interests. Some also contain inferred attributes, such as predicted purchasing behavior. Records are often matched by linking identifiers, which is why a change of address might not remove an old listing.
These records are often incomplete or wrong. Matching mistakes can merge two people with similar names, and old information can persist for years. Anyone relying on this data should treat it as probabilistic.
How the data is sold and used
Marketing and advertising. Lists of people with certain characteristics are sold for mail, email, phone or online ad targeting. Brokers also help advertisers connect an online identity with offline purchases.
People-search sites. Consumer-facing sites let a visitor look up a name and see a summary, sometimes for a fee. These raise safety concerns, because the same information can be used for harassment or stalking.
Risk and verification. Some firms supply data to verify identities, detect fraud, or screen applicants. In the United States, certain uses of this kind, such as credit, employment or tenant screening, are governed by specific laws that give consumers rights to see and dispute reports. Brokers outside those uses are generally less regulated.
Analytics. Companies use purchased data to enrich their own records, which ties into data analytics and customer profiling.
Government and law enforcement. In some countries, agencies have purchased commercially available data. Policies on this are debated.
Why it matters
Individually, many data points seem harmless. The concern is aggregation: when scattered records are linked into one profile, they can enable unwanted marketing, scams that use accurate personal details to appear convincing, identity theft, or tracking of a person’s movements and household. Combined data can also feed into automated decisions in ways the person never sees.
Because brokers are often not the original collector, you may have no obvious point of contact to ask what is held about you.
What laws say
Rules vary widely. Some regions require brokers to register, to tell people what they hold, or to honor deletion requests. In the European Union, the GDPR applies to any organization processing personal data of people in the EU, including brokers, and provides access and erasure rights, as summarized in the article on GDPR rights. In the United States, there is no single national law for the whole industry, but some states have created broker registries or deletion mechanisms, and sector-specific federal laws cover areas like credit reporting. Details change, so check current official sources for your location.
Reducing your exposure
You are unlikely to remove everything, but you can reduce it:
- Look yourself up. Search your name on a few people-search sites to see what is publicly listed.
- Use opt-out forms. Many brokers provide a request page or email address. Processes differ, can be tedious, and records may reappear over time because brokers refresh their data from other sources.
- Consider a removal service carefully. Paid services exist that submit requests for you. Their coverage and reliability vary, so read what they actually promise.
- Limit what you share. Be selective with surveys, sweepstakes forms and loyalty sign-ups, and use a secondary email address or phone number where practical.
- Tighten app and phone settings. Review which apps can access location or contacts, a topic covered under app permissions.
- Place fraud protections. Credit freezes, where available, can reduce the risk of identity theft even if data is already out there.
Honest expectations help here. Opting out reduces visibility and nuisance but does not guarantee that your information disappears for good.