Data Brokers: Who Is Selling Your Personal Information in 2026

Every time you sign up for a newsletter, apply for a store loyalty card, or install a free mobile app, invisible companies are watching. These companies—called data brokers—collect, package, and sell your personal information to advertisers, employers, insurers, political campaigns, and sometimes even scammers. Most people have never heard of them, yet they hold detailed dossiers on nearly every adult in the developed world.

This guide explains exactly who data brokers are, what information they sell, how the industry works, and what you can do to reclaim your privacy in 2026.

What Are Data Brokers?

Data brokers are companies that collect personal information about consumers from public and private sources, aggregate it into detailed profiles, and sell access to those profiles to third parties. They typically operate without any direct relationship with the people whose data they trade.

The global data broker industry is estimated to be worth over $280 billion in 2026, with thousands of firms operating across the United States, European Union, United Kingdom, and Asia-Pacific. Some brokers specialize in marketing lists, others in background checks, credit scoring, health analytics, or location data. Together they form an ecosystem that quietly powers much of the modern digital economy.

How the Industry Is Structured

Data brokers generally fall into four main categories:

Marketing brokers — sell consumer profiles to advertisers and retailers (e.g., Acxiom, Epsilon).
People-search brokers — publish searchable profiles for anyone to look up (e.g., Spokeo, BeenVerified, Whitepages).
Risk and fraud brokers — supply data to banks, insurers, and law enforcement (e.g., LexisNexis Risk Solutions, TransUnion).
Location and mobile data brokers — sell GPS traces harvested from apps (e.g., Cuebiq, X-Mode/Outlogic).

What Personal Information Do Data Brokers Sell?

Data brokers collect far more than a name and email. A single profile can contain hundreds—sometimes thousands—of individual data points, blended from dozens of sources.

Categories of Data Typically Collected

Identifiers: full name, date of birth, Social Security number (in the US), phone numbers, email addresses, past and present home addresses.
Financial data: estimated income, credit score ranges, homeownership status, mortgage details, bankruptcy history.
Demographic data: race, ethnicity, religion, political affiliation, sexual orientation, household composition.
Behavioral data: shopping habits, brand preferences, web browsing history, streaming activity.
Health-related inferences: conditions you may have, medications purchased, fitness tracker data.
Location data: where you live, work, worship, and travel—often accurate to within a few meters.
Relationships: family members, roommates, coworkers, and social connections.

How Do Data Brokers Get Your Information?

Data brokers rarely collect data directly from you. Instead, they aggregate information from a mosaic of sources, most of which are perfectly legal.

Common Data Sources

Public records: voter registrations, property deeds, court filings, marriage licenses, professional licenses.
Commercial transactions: loyalty programs, warranty registrations, magazine subscriptions, charity donations.
Mobile app SDKs: free games, weather apps, and utility apps often bundle tracking code that quietly transmits location and device data.
Web tracking: cookies, pixels, and fingerprinting scripts on websites you visit.
Social media scraping: publicly visible profiles, posts, and connections.
Data partnerships: brokers trade and license datasets among themselves, multiplying the reach of each source.
Leaked and breached data: some less scrupulous brokers incorporate information from data breaches into their profiles.

The Biggest Data Brokers in 2026

Below is a snapshot of the largest and most influential data brokers, ranked by revenue, database size, and industry impact.

Company	Primary Focus	Approx. Records	Headquarters
Acxiom (LiveRamp)	Marketing profiles	2.5+ billion consumers	USA
Experian	Credit & marketing	1 billion+ globally	Ireland/UK
Equifax	Credit & risk	800 million+	USA
LexisNexis Risk Solutions	Fraud, legal, insurance	10,000+ databases	USA
Epsilon (Publicis)	Marketing & advertising	250 million US consumers	USA
Oracle Data Cloud	Advertising audiences	5 billion+ IDs	USA
Spokeo	People search	600 million profiles	USA
BeenVerified	People search & background	Hundreds of millions	USA
CoreLogic	Property & financial	4.5 billion records	USA
Nielsen	Media & consumer	Global panels	USA

Who Buys Data From Brokers?

The customer list for data brokers is longer and more varied than most consumers realize. Buyers include:

Advertisers and marketers targeting hyper-specific audiences.
Retailers segmenting customers and personalizing offers.
Banks and insurers assessing creditworthiness and risk.
Employers and landlords running background checks.
Political campaigns micro-targeting voters.
Government agencies, including law enforcement, immigration, and defense.
Health and pharmaceutical companies studying patient behavior.
Debt collectors and private investigators tracing individuals.
Fraudsters and stalkers, in worst-case scenarios, buying profiles from lightly regulated people-search sites.

The Real Risks of Data Broker Activity

Data broker profiles power more than annoying ads. They can materially affect your life in ways you rarely see.

1. Identity Theft and Fraud

When brokers get breached—as Equifax did in 2017, exposing 147 million Americans—the fallout can last decades. Aggregated data makes it easier for criminals to answer security questions, open credit accounts, and impersonate victims.

2. Discriminatory Pricing and Decisions

Insurers, lenders, and even online retailers use broker data to charge different prices to different people. Studies have shown consistent patterns of price discrimination based on ZIP code, inferred ethnicity, and device type.

3. Stalking and Physical Safety

People-search sites have been implicated in stalking cases, domestic abuse incidents, and even murders. In 2020, a New Jersey federal judge's son was killed by an attacker who found the family's home address through a data broker.

4. Manipulation and Disinformation

The Cambridge Analytica scandal showed how broker-style profiling can be weaponized to influence elections. That playbook has only grown more sophisticated in the years since.

5. Chilling Effects on Free Expression

When people know they are being profiled, they self-censor. This has measurable effects on journalism, activism, and even ordinary web searches on sensitive topics.

Laws Regulating Data Brokers Around the World

Regulation is finally catching up to the industry, though enforcement remains uneven.

United States

California CCPA/CPRA: gives residents the right to know, delete, and opt out of the sale of their information. Brokers must register with the state.
Vermont, Texas, and Oregon also require data broker registration.
The California Delete Act (2024) mandates a one-stop deletion mechanism starting in 2026, letting Californians remove themselves from all registered brokers with a single request.

European Union and United Kingdom

GDPR treats brokering as a form of processing that requires a lawful basis. Consumers have strong rights to access, correct, and delete their data, and brokers must respond within 30 days.

Other Regions

Brazil's LGPD, Canada's PIPEDA, and Australia's Privacy Act reforms all move in the same direction: more transparency, more consumer control, and higher penalties for misuse.

How to Remove Yourself From Data Broker Databases

You cannot fully disappear from every broker, but you can dramatically shrink your footprint with consistent effort.

Step-by-Step Removal Process

Make a list of major brokers to contact—Acxiom, Epsilon, LexisNexis, Oracle, Spokeo, BeenVerified, Whitepages, Intelius, and MyLife are common starting points.
Search for yourself on each people-search site to confirm what profiles exist.
Locate the opt-out page. Every registered broker must offer one, though they often bury it.
Submit removal requests for each profile, providing only the minimum verification data required.
Follow up in 30 days. Brokers frequently re-list profiles from fresh data feeds, so removal is not permanent.
Consider a paid removal service such as DeleteMe, Kanary, Optery, or Incogni if you value your time. These services automate ongoing removal across hundreds of brokers.
Freeze your credit with Experian, Equifax, and TransUnion to blunt the effect of any leaks.

Reducing Future Data Collection

Use email aliases (Apple Hide My Email, DuckDuckGo Email Protection, SimpleLogin) for signups.
Provide a secondary phone number for loyalty programs.
Turn off ad ID tracking on iOS and Android and reset it periodically.
Deny location permissions to any app that does not truly need them.
Switch to a privacy-focused browser such as Brave or Firefox with strict tracking protection.
Enable encrypted DNS (DNS over HTTPS) to reduce network-level tracking.
Be careful about the links you share publicly. Using a trusted shortener like Lunyb lets you cloak long URLs that would otherwise leak referral parameters and identifiers. You can read our transparent breakdown in this honest Lunyb review.

Data Brokers vs. Everyday Tools You Actually Control

Not every company that touches your data is a broker. It helps to distinguish between businesses that sell your information and services that simply process it to deliver a product you asked for.

Type of Service	Business Model	Privacy Risk
Data broker	Sells your profile to third parties	High — you have no relationship with them
Ad-supported free app	Monetizes attention and often shares data with brokers	Medium to high
Reputable URL shortener (e.g., Lunyb, Bitly, Rebrandly)	Provides link management and analytics for the link owner	Low — no personal profile sold
Paid privacy tool	You are the customer, not the product	Low

If you want to compare link management tools before choosing one, our 2026 URL shortener buyer's guide and our Rebrandly review both examine how each service handles user data.

The Future of the Data Broker Industry

Three forces will reshape data brokering over the next five years.

Regulation: More US states are passing comprehensive privacy laws each year, and the FTC has begun aggressive enforcement against brokers that sell sensitive location and health data.
Browser and OS changes: The deprecation of third-party cookies, Apple's App Tracking Transparency, and Google's Privacy Sandbox are choking off the raw material brokers rely on.
AI-driven inference: Ironically, as raw data becomes harder to obtain, brokers are turning to machine learning to infer traits from smaller samples—raising new accuracy and fairness concerns.

The result is an industry in flux. Expect fewer but larger brokers, more sophisticated modeling, and a growing consumer market for privacy tools that push back.

Frequently Asked Questions

Is it legal for data brokers to sell my personal information?

In most countries, yes—provided the broker follows applicable privacy laws. In the EU, UK, California, and a growing list of other jurisdictions, brokers must have a lawful basis for processing and must honor consumer rights to access and delete data. Selling sensitive categories such as precise location or health data without consent is increasingly restricted or outright banned.

How much is my personal data worth to brokers?

A single consumer profile typically sells for less than a dollar—sometimes just a few cents. The value comes from scale. Brokers make money by selling the same profile many times to many buyers, which is why the industry generates hundreds of billions of dollars annually despite low per-record prices.

Can I really remove all my information from data brokers?

Complete removal is essentially impossible because new data flows into brokers constantly from public records, purchases, and app tracking. However, you can remove yourself from most major people-search sites and marketing databases through opt-out requests. Paid services like DeleteMe or Optery can automate this ongoing process across hundreds of brokers.

How do I know if my data has been sold or leaked?

Check services like Have I Been Pwned to see whether your email appears in known breaches. In California, EU, and UK, you have the legal right to request a copy of the data a broker holds on you. If you notice a spike in spam, targeted ads for topics you never searched for, or credit inquiries you did not authorize, it is a strong sign your profile is circulating.

What is the difference between a data broker and an advertising network?

An advertising network buys and places ads across websites and apps, often using audience segments provided by data brokers. The broker builds and sells the profile; the ad network uses that profile to decide which ads you see. The two industries overlap heavily, and many large companies (like Oracle) operate in both.