Data Brokers: Who Is Selling Your Personal Information in 2026

Every time you sign up for a loyalty card, browse a shopping site, or fill out an online form, someone is taking notes. That "someone" is often a data broker—a company whose entire business model revolves around collecting, packaging, and selling your personal information. In 2026, the global data broker industry is worth over $400 billion, and most consumers have never heard of the companies that know their home address, income bracket, health conditions, and shopping habits.

This guide unpacks how data brokers operate, who the biggest players are, what they know about you, and—most importantly—what you can do to take back control of your personal information.

What Are Data Brokers?

Data brokers are companies that collect personal information about consumers from public and private sources, aggregate it into detailed profiles, and sell those profiles to third parties. Unlike social media platforms or retailers, data brokers usually have no direct relationship with the people whose data they trade.

These companies operate in a largely invisible layer of the digital economy. You never sign up for their services, yet they may hold hundreds—sometimes thousands—of data points about you, including:

Full name, current and past addresses
Phone numbers and email addresses
Date of birth and family members' names
Income level, credit range, and homeownership status
Purchase history and brand preferences
Health interests and medical conditions
Political affiliation and religious beliefs
Location patterns and daily routines

How Data Brokers Collect Your Personal Information

Data brokers use a mix of legal, technical, and commercial methods to build their profiles. Understanding these collection channels is the first step to shutting them down.

1. Public Records

Court filings, property deeds, marriage licenses, voter registration rolls, and business registrations are all fair game. Brokers scrape these records at scale and link them to individuals.

2. Commercial Sources

Retailers, magazine subscribers, warranty registrations, and loyalty programs frequently share or sell customer data. That "free" coupon in exchange for your email address usually funds a broker's database.

3. Web Tracking and Cookies

Trackers embedded in websites and mobile apps capture browsing behavior, search queries, and app usage. Ad-tech partners then feed this behavioral data into broker ecosystems.

4. Mobile Location Data

Free apps—weather, flashlights, games—often harvest GPS coordinates and sell them to location data brokers. These companies can reconstruct where you live, work, and worship.

5. Social Media Scraping

Public profile information, likes, followers, and posts are collected via automated tools, then merged with other identifiers.

6. Data Partnerships and Resale

Brokers buy from one another, creating a hall-of-mirrors ecosystem where a single data point can be traded dozens of times.

The Major Data Brokers You Should Know

While thousands of data broker firms exist worldwide, a handful dominate the industry. Here is how the biggest players compare in 2026.

Data Broker	Primary Focus	Estimated Profiles	Annual Revenue
Acxiom (LiveRamp)	Marketing & identity resolution	2.5 billion+	$650M+
Experian	Credit & consumer marketing	1 billion+	$7B+
Equifax	Credit & workforce data	820 million+	$5.7B+
TransUnion	Credit & risk intelligence	1 billion+	$3.9B+
Oracle Data Cloud	Ad targeting audiences	5 billion+ device IDs	Bundled
Epsilon	Marketing databases	250 million+ (US)	$2B+
CoreLogic	Property & financial data	4.5 billion property records	$1.8B+
Spokeo / BeenVerified	People-search sites	Hundreds of millions	Undisclosed

Who Buys This Data—and Why?

Data brokers serve a surprisingly broad customer base. The buyers on the other end of these transactions often shape decisions that affect your daily life.

Advertisers and Marketers

The largest buyers use broker data to build audience segments and target ads with pinpoint precision—down to "new parents earning $75K+ who recently searched for minivans."

Financial Institutions

Banks, insurers, and lenders purchase data to assess risk, verify identity, and price products. This can affect the loan rates or insurance premiums you are offered.

Employers and Landlords

Background check services rely on broker databases to screen job applicants and tenants.

Political Campaigns

Political operatives buy voter profiles augmented with lifestyle and psychographic data to micro-target messaging.

Government Agencies

Law enforcement and intelligence agencies increasingly purchase broker data—sometimes to bypass warrant requirements they would otherwise face.

Scammers and Fraudsters

Although reputable brokers claim to vet clients, leaks and resale mean that fraud rings, robocallers, and phishing operators regularly obtain broker data.

Why the Data Broker Industry Is a Privacy Problem

The data broker business creates real-world consequences beyond just annoying ads. Here are the most concerning risks.

1. No Meaningful Consent

Consumers rarely know their data is being collected, let alone sold. Consent, when it exists, is buried in privacy policies few people read.

2. Inaccurate Profiles

Data brokers frequently make mistakes—wrong income brackets, false criminal histories, mixed-up identities. These errors can cost people jobs, housing, and loans.

3. Vulnerable Populations at Risk

Lists of "elderly with dementia," "rape survivors," or "people with financial difficulties" have all been documented for sale, creating easy hunting grounds for predators.

4. Data Breaches

The 2017 Equifax breach exposed 147 million people. Because brokers aggregate so much sensitive information in one place, a single breach can be catastrophic.

5. Erosion of Anonymity

Even "anonymized" data can often be re-identified when cross-referenced with other datasets—especially location data.

Global Regulations on Data Brokers

Different regions have taken very different approaches to regulating this industry.

European Union — GDPR

The General Data Protection Regulation requires a lawful basis for processing personal data, gives users rights to access and delete their data, and imposes heavy fines. Data brokers operating in the EU face significant compliance burdens.

United States — Patchwork

There is no comprehensive federal privacy law. California (CCPA/CPRA), Virginia, Colorado, Connecticut, Texas, and a growing list of states have their own rules. California's Delete Act (effective 2026) requires a one-stop deletion mechanism for data brokers registered in the state.

United Kingdom — UK GDPR

Mirrors EU protections with local enforcement by the Information Commissioner's Office.

Canada — PIPEDA

Provides consumer rights but is widely considered overdue for modernization.

Brazil — LGPD

Modeled on GDPR, offering similar protections for Brazilian residents.

How to Find Out What Data Brokers Know About You

You have more visibility—and more rights—than you might think. Here is a practical process to audit your exposure.

Search yourself. Google your full name in quotes, along with your city. Note any people-search sites (Spokeo, BeenVerified, Whitepages, MyLife) that appear.
Check state registries. California and Vermont maintain public lists of registered data brokers. This is the closest thing to a global directory.
Request your data. Under GDPR, CCPA, and similar laws, you can submit a Subject Access Request (SAR) to any broker holding your information.
Review credit disclosures. Equifax, Experian, and TransUnion offer free annual reports that hint at what identity data they hold.
Use privacy dashboards. Some brokers offer opt-out portals; sites like the EFF's Privacy Badger and Mozilla's Privacy Not Included maintain useful references.

How to Remove Yourself from Data Broker Databases

Opting out is tedious but effective. Follow these steps to significantly reduce your data broker footprint.

1. Submit Manual Opt-Outs

Each major broker has an opt-out form—usually intentionally hard to find. Start with the top 20 people-search sites, then move to marketing brokers. Expect to submit ID verification in some cases.

2. Use Automated Removal Services

Services like DeleteMe, Kanary, Optery, and Incogni handle the paperwork for you. They typically cost $100–$200 per year and can remove your data from 100+ brokers on a recurring basis.

3. Freeze Your Credit

A credit freeze at Equifax, Experian, TransUnion, and Innovis stops most identity-related data sales and prevents new accounts from being opened in your name.

4. Register on Suppression Lists

The DMA's DMAchoice, the National Do Not Call Registry, and similar programs suppress your inclusion in marketing lists.

5. Reduce Future Data Leakage

Prevention is cheaper than removal. Use disposable email addresses for sign-ups, avoid loyalty programs that resell data, decline cookie tracking, and audit app permissions regularly.

Everyday Privacy Habits That Starve Data Brokers

Removal is only half the battle—you also need to limit the flow of new data feeding these databases.

Use a Privacy-Respecting Browser

Browsers like Firefox, Brave, and DuckDuckGo block third-party trackers by default and prevent much of the passive data collection brokers rely on.

Enable Encrypted DNS

Configuring DNS over HTTPS (DoH) or DNS over TLS (DoT) with providers like Cloudflare (1.1.1.1) or Quad9 stops your internet provider from logging and selling your browsing history.

Be Cautious With URL Sharing

Long URLs often carry tracking parameters (UTM tags, click IDs, affiliate codes) that feed broker profiles. When sharing links, use a privacy-conscious shortener like Lunyb, which lets you strip trackers and share cleaner, safer URLs. For a deeper look at how it stacks up, see our honest review of Lunyb and the broader 2026 buyer's guide to URL shorteners.

Audit App Permissions Monthly

Revoke location, contacts, and microphone permissions from apps that do not genuinely need them. Location data is the single most valuable and most abused data type sold by brokers.

Use Aliases and Masked Emails

Services like Apple Hide My Email, Firefox Relay, and SimpleLogin generate disposable addresses so brokers cannot correlate your activity across sites.

Pay With Privacy in Mind

Virtual card services (Privacy.com, Revolut disposable cards) prevent merchants from selling your purchase history tied to your real name.

The Future of the Data Broker Industry

Several trends are reshaping the industry heading into the late 2020s.

Stricter Regulation

The US federal government is inching toward a national privacy law, while state-level enforcement is accelerating. Expect fines, mandatory deletion tools, and registration requirements to become the norm.

AI-Driven Profiling

Machine learning enables brokers to infer sensitive attributes—sexual orientation, mental health, pregnancy—from seemingly innocuous data. This raises the ethical stakes significantly.

Consumer Awareness

Public pressure is building. High-profile lawsuits, documentaries, and journalism have made "data broker" a household term for the first time.

Privacy-Preserving Alternatives

Federated learning, on-device processing, and clean-room advertising offer paths to personalization without wholesale data harvesting. Whether the industry embraces them remains to be seen.

Frequently Asked Questions

Is it legal for data brokers to sell my personal information?

In most jurisdictions, yes—provided the broker complies with local privacy laws. The EU, UK, and several US states impose meaningful restrictions, but in many regions the industry operates with minimal oversight. Legality does not equal ethics: many practices are legal but widely considered harmful.

How long does it take to remove myself from data broker databases?

Manual removal typically takes 4–8 weeks per broker, and many brokers re-add your information over time. Automated services offer continuous monitoring, which is why they remain the most practical option for long-term removal.

Do data brokers sell information about children?

Selling data on minors is heavily restricted in most jurisdictions (COPPA in the US, GDPR in the EU). However, teens over 13 are less protected, and inadvertent collection through family accounts and school apps remains a documented problem.

Can data brokers sell my medical or health information?

HIPAA-covered data (from doctors, hospitals, insurers) cannot be sold. But health information you enter into apps, wearables, wellness sites, or search engines is not covered by HIPAA and is routinely bought and sold. Consumer health data is one of the fastest-growing broker categories.

Is using a URL shortener safer than sharing raw links?

It can be, if the shortener is privacy-focused. A good shortener strips tracking parameters, prevents referrer leakage, and lets you audit clicks without exposing your identity. Avoid free shorteners that monetize by selling click data—read the privacy policy before you commit.

Final Thoughts

Data brokers thrive on invisibility. The more you understand how they collect, package, and sell your personal information, the more power you have to disrupt that flow. You will not eliminate your digital footprint overnight—but combining removal services, privacy-first tools, and mindful daily habits can meaningfully shrink what brokers know about you.

Privacy is not a one-time project; it is an ongoing practice. Start with the highest-value actions—freezing your credit, opting out of the top 20 people-search sites, and locking down location permissions—and build from there.