Data Brokers: Who Is Selling Your Personal Information in 2026

Every time you browse a website, sign up for a loyalty card, or share your email at checkout, invisible companies are watching. These companies — known as data brokers — build detailed profiles about you and sell that information to advertisers, insurers, employers, and sometimes even scammers. The data brokerage industry is now worth over $280 billion globally, yet most people have never heard of the firms making money from their personal details.

This guide explains exactly who data brokers are, how they collect your information, who buys it, and what you can do to reclaim your privacy.

What Are Data Brokers?

Data brokers are companies that collect, aggregate, analyze, and sell personal information about consumers without those consumers directly interacting with them. They operate in the shadows of the digital economy, buying raw data from thousands of sources, combining it into detailed dossiers, and reselling those profiles to anyone willing to pay.

Unlike companies you knowingly share data with — like your bank or email provider — data brokers typically have no direct relationship with you. You never signed up, never agreed to their terms, and often have no idea they exist. Yet they may know your home address, income bracket, health conditions, political leanings, shopping habits, and more.

The Three Main Types of Data Brokers

Marketing data brokers — Sell consumer profiles to advertisers and brands for targeted marketing campaigns.
Risk mitigation brokers — Provide identity verification, fraud detection, and background checks to banks, insurers, and employers.
People-search sites — Publish your name, address, phone number, relatives, and other details online, often charging for "premium" reports.

How Data Brokers Collect Your Personal Information

Data brokers don't hack your accounts or steal information. They gather it from perfectly legal (though often ethically murky) sources. Understanding these pipelines is the first step to shutting them off.

Public Records

Government records are the foundation of most broker databases. These include:

Voter registration rolls
Property deeds and tax assessments
Court records, bankruptcies, and liens
Marriage, divorce, and birth certificates
Business licenses and professional certifications

Commercial Sources

Retailers, loyalty programs, and subscription services routinely sell or share customer data. When you hand over your email at the register for a 10% discount, that data often ends up in broker pipelines within days.

Online Tracking

Cookies, tracking pixels, browser fingerprinting, and mobile app SDKs quietly feed brokers information about the sites you visit, the apps you use, and even your physical location via GPS data from your phone.

Social Media Scraping

Publicly available posts, likes, friend lists, and profile details are harvested at scale. Even information you share only with "friends" can leak through third-party apps, quizzes, and compromised accounts in your network.

Data Partnerships and Breaches

Brokers trade datasets with each other, buy information from marketing partners, and — more controversially — sometimes acquire data that originated from breaches circulating on gray markets.

The Biggest Data Brokers You've Probably Never Heard Of

While Google and Meta get most of the privacy headlines, the quiet giants of data brokerage often know more about you than either tech company. Here's a comparison of the major players.

Company	Primary Focus	Estimated Profiles	Annual Revenue
Acxiom (LiveRamp)	Marketing data, identity graphs	2.5 billion+	$650M+
Experian	Credit, marketing, risk	1 billion+	$7.1B+
Equifax	Credit reporting, workforce data	820 million+	$5.3B+
Oracle Data Cloud	Ad targeting, audience data	5 billion+ device IDs	Part of Oracle
CoreLogic	Property, financial data	4.5 billion records	$1.8B+
Spokeo	People-search	12 billion+ records	Private
Whitepages	People-search, phone lookup	600 million+	Private

Who Buys Your Personal Information?

The customer list for data brokers is far broader than most people realize. It extends well beyond advertisers.

Advertisers and Marketers

The most common buyers. They use broker data to target ads based on income, life events (new baby, new home, divorce), health conditions, and dozens of other attributes.

Financial Institutions and Insurers

Banks, credit card companies, and insurance firms buy data to assess risk, verify identities, set premiums, and detect fraud. Your broker profile can literally affect what interest rate you're offered.

Employers and Landlords

Background check services draw heavily from broker databases. A single error in a broker's file can cost you a job or an apartment.

Political Campaigns

Campaigns purchase voter profiles enriched with lifestyle and ideological data to micro-target messaging. The Cambridge Analytica scandal was only the most visible example of a widespread practice.

Law Enforcement and Government Agencies

Investigators often buy data from brokers to sidestep legal processes that would otherwise require warrants. This practice has drawn scrutiny from privacy regulators worldwide.

Scammers and Fraudsters

People-search sites make it trivially easy for stalkers, scammers, and identity thieves to gather personal details. A $20 subscription can yield addresses, phone numbers, and family connections for almost anyone.

What Information Is in Your Broker Profile?

A typical consumer file held by a major broker can contain hundreds — sometimes thousands — of individual data points. Common categories include:

Identity: Full name, aliases, date of birth, Social Security or national ID fragments
Contact: Home address history, phone numbers, email addresses
Household: Family members, roommates, marital status, children's ages
Financial: Estimated income, net worth, credit tier, homeownership, mortgage details
Lifestyle: Hobbies, magazine subscriptions, charitable donations, pet ownership
Health: Inferred conditions, medication categories, fitness activity
Behavioral: Shopping patterns, brand preferences, websites visited, apps used
Location: Daily movement patterns derived from mobile apps
Political: Party affiliation, likely voting behavior, issue positions

The Real-World Risks of Data Brokerage

It's tempting to shrug and say "I have nothing to hide." But the consequences of unchecked data brokerage are concrete and sometimes severe.

Identity Theft and Fraud

The more information publicly available about you, the easier it is for criminals to impersonate you, answer security questions, or craft convincing phishing attacks.

Price Discrimination

Companies use broker data to show different prices to different customers for the same product. Shoppers flagged as "price insensitive" may pay significantly more than their neighbors.

Stalking and Harassment

People-search sites have been directly linked to stalking incidents, domestic violence, and the doxxing of journalists and activists.

Discrimination

Algorithms trained on broker data can bake in and amplify discrimination in hiring, lending, insurance, and housing — often in ways that are legally gray but practically devastating.

Laws That Regulate Data Brokers

Regulation is catching up, but unevenly. A quick snapshot of the current global landscape:

Region	Key Law	Broker Impact
European Union	GDPR	Strict consent and deletion rights; brokers must have a lawful basis
California, USA	CCPA / CPRA + Delete Act	Right to opt out; broker registry; one-click deletion by 2026
Vermont, USA	Data Broker Law	Mandatory broker registration
United Kingdom	UK GDPR + DPA 2018	Similar to EU rules
Brazil	LGPD	Consent-based data processing
Australia	Privacy Act (updated)	Expanding consumer rights in 2025-26

How to Remove Yourself From Data Broker Databases

Opting out is possible but tedious. Each broker has its own process, and many require you to re-submit requests every few months. Here's a practical approach.

Step-by-Step Opt-Out Process

Start with people-search sites. These are the most publicly visible. Target Spokeo, Whitepages, BeenVerified, Intelius, MyLife, and Radaris first.
Submit opt-out requests at each site. Most have a "privacy" or "opt-out" link in the footer. Expect to verify by email or, frustratingly, by phone.
File GDPR or CCPA deletion requests if you qualify. These are legally binding and more powerful than voluntary opt-outs.
Opt out of credit bureau marketing lists via the official prescreen opt-out services in your country.
Repeat every 3-6 months. Brokers routinely re-add profiles from new data sources.
Consider a removal service if the manual process is too time-consuming. Services like DeleteMe, Kanary, and Optery automate requests for a monthly fee.

Preventing Future Data Collection

Removal is only half the battle. To slow the flow of new data into broker databases:

Use a privacy-focused browser (Brave, Firefox with strict settings, or DuckDuckGo).
Enable encrypted DNS (DoH or DoT) at the device or network level.
Install a reputable tracker blocker such as uBlock Origin or Privacy Badger.
Create separate email aliases for sign-ups using services like SimpleLogin or Firefox Relay.
Decline loyalty programs or use a dedicated "junk" identity for them.
Review app permissions on your phone — especially location access — and revoke anything unnecessary.
Use a privacy-respecting link shortener like Lunyb when sharing URLs, so your redirect traffic isn't funneled into advertising-focused analytics networks. For more on this, see our honest Lunyb review.

Choosing Tools That Respect Your Privacy

Every service you use is a potential data source for brokers. Picking privacy-conscious tools matters more than ever. When evaluating any online service, ask:

Does the provider publish a clear, plain-language privacy policy?
Does it sell or share data with third parties?
Is data retention minimized?
Is the service transparent about analytics and tracking?

For link sharing specifically, choosing the right shortener can reduce how much behavioral data leaks into the ad-tech ecosystem. Our 2026 buyer's guide to URL shorteners compares the leading options on privacy, features, and pricing. If you're weighing paid tools, our Rebrandly review also breaks down what you're actually paying for.

The Future of Data Brokerage

The industry is at an inflection point. Browser-level tracking is being deprecated, regulators are tightening the screws, and consumers are waking up to how their data is used. At the same time, brokers are investing heavily in "privacy-safe" identity graphs, server-side tracking, and AI-driven inference — meaning even if you share less, they'll try to guess more.

Expect the next few years to bring:

Universal opt-out mechanisms that work across brokers with a single click
Stronger enforcement actions and multi-million-dollar fines
A shift from third-party cookies to first-party data collaborations
Growing consumer appetite for privacy-first alternatives across every category of software

Frequently Asked Questions

How many data brokers are there?

Estimates vary, but there are roughly 4,000 to 5,000 companies worldwide that qualify as data brokers. Only a few hundred are large and well known; the rest operate as niche specialists serving particular industries or regions.

Is it legal for data brokers to sell my information?

In most jurisdictions, yes — provided they comply with applicable privacy laws. The specifics vary dramatically: the EU and UK require a lawful basis and offer strong deletion rights, while much of the United States still operates on an opt-out model rather than an opt-in one.

How do I know if my data is being sold?

Search your name on major people-search sites (Spokeo, Whitepages, BeenVerified) — if you appear, your data is being sold. You can also submit "right to know" requests under laws like GDPR or CCPA, which require brokers to disclose what they have on you.

Are data removal services worth it?

For many people, yes. Services like DeleteMe or Optery charge $100-200 per year to automate hundreds of opt-outs you'd otherwise do manually. They can't force every broker to comply, but they handle the ongoing maintenance that makes DIY removal exhausting.

Can I sue a data broker?

Depending on your jurisdiction, yes. GDPR, CCPA, and other laws give consumers private rights of action in specific circumstances — particularly when a broker refuses to delete data, mishandles sensitive categories, or suffers a breach that exposes your information.

Final Thoughts

Data brokers have operated quietly for decades, but the era of invisible data trading is ending. Between stronger regulations, better privacy tools, and growing public awareness, individuals finally have real options to push back. It takes time and persistence, but reducing your data broker footprint is one of the highest-impact privacy moves you can make in 2026 — protecting not just your inbox from spam, but your finances, safety, and reputation from a much wider set of risks.