Data Brokers: Who Is Selling Your Personal Information in 2026

Every time you browse a website, sign up for a loyalty card, install a mobile app, or fill out an online form, invisible companies are watching. They collect, package, and resell details about your life — often without your knowledge or meaningful consent. These companies are called data brokers, and their global industry is worth well over $250 billion in 2026.

This guide explains exactly who data brokers are, how they obtain your information, which companies dominate the market, and the practical steps you can take to remove your data from their systems.

What Are Data Brokers?

Data brokers are companies that collect, aggregate, and sell personal information about individuals without having a direct relationship with them. Unlike a bank or retailer you knowingly share data with, data brokers operate behind the scenes, buying information from thousands of sources and repackaging it into detailed consumer profiles.

A single broker profile can include your full name, current and past addresses, phone numbers, email addresses, income range, marital status, religion, political leanings, health conditions, shopping habits, GPS location history, and hundreds of behavioral traits inferred from your online activity.

The Three Main Types of Data Brokers

Marketing and advertising brokers — sell audience segments to advertisers so they can target ads more precisely (e.g., Acxiom, Epsilon, Oracle Data Cloud).
People-search sites — display personal records to anyone willing to pay a small fee (e.g., Spokeo, BeenVerified, Whitepages, Radaris).
Risk and fraud brokers — sell data to banks, insurers, landlords, and employers for background checks and credit decisions (e.g., LexisNexis Risk Solutions, CoreLogic, Equifax).

How Data Brokers Collect Your Personal Information

Data brokers rarely collect information directly from you. Instead, they aggregate it from a huge web of public and private sources. Understanding these pipelines is the first step to shutting them down.

Public Records

Court filings, property deeds, marriage and divorce records, voter registration rolls, birth records, and business filings are all fair game. Brokers scrape or bulk-purchase these government records and link them to your name.

Commercial Sources

Retailers, magazine subscriptions, warranty registration cards, sweepstakes entries, and loyalty programs frequently sell customer lists. That harmless-looking questionnaire at checkout often feeds directly into broker databases.

Online Tracking

Cookies, tracking pixels, browser fingerprinting, and mobile SDKs embedded in apps quietly report your behavior back to ad-tech networks, which then sell the data onward. A single news article you read can trigger data flows to dozens of third parties.

Mobile Apps and Location Data

Weather apps, prayer apps, fitness trackers, and even flashlight apps have been caught selling precise GPS coordinates. Location data is particularly valuable because it reveals where you live, work, worship, and seek medical care.

Data Breaches and Leaks

When companies suffer breaches, the stolen data doesn't disappear. It circulates on dark-web marketplaces and eventually reappears in legitimate-looking broker databases, mixed with legally obtained records.

Who Are the Biggest Data Brokers Selling Personal Information?

The industry is dominated by a handful of large firms that hold data on nearly every adult in developed countries. Here is a snapshot of the major players in 2026.

Company	Primary Business	Estimated Records Held	Main Customers
Acxiom (LiveRamp)	Marketing data	2.5 billion+ consumers	Advertisers, Fortune 500 brands
Epsilon	Marketing and email data	250 million U.S. consumers	Retail, financial services
Oracle Data Cloud	Audience targeting	5 billion+ device IDs	Ad networks, publishers
LexisNexis Risk Solutions	Risk and identity	10,000+ data points per person	Insurers, banks, government
CoreLogic	Property and financial	4.5 billion property records	Real estate, insurance
Spokeo	People search	12 billion+ records	General public
Whitepages	People search	250 million U.S. adults	General public, businesses
Equifax	Credit and identity	800 million consumers	Lenders, employers

Why Data Brokers Selling Personal Information Is a Problem

At first glance, targeted advertising might seem harmless. But the data broker industry causes real-world harm in ways most consumers never see.

1. Identity Theft and Fraud

Broker profiles give scammers everything they need to impersonate you, guess security questions, or launch convincing phishing attacks. When brokers themselves are breached — as happened with the 2024 National Public Data leak that exposed 2.9 billion records — the consequences are catastrophic.

2. Discrimination in Pricing and Services

Insurers, lenders, and even online retailers use broker data to adjust prices and eligibility. Two people can be quoted different premiums for the same policy based on inferences about their health, ethnicity, or ZIP code.

3. Stalking and Harassment

People-search sites make it trivial to look up someone's home address for less than $10. Victims of domestic abuse, journalists, and public officials have all been endangered by information sold through these platforms.

4. Government Surveillance Without a Warrant

U.S. law enforcement and intelligence agencies routinely buy location and behavioral data from brokers to sidestep constitutional protections that would normally require a warrant. Similar practices exist across Europe and Asia.

5. Manipulation and Political Targeting

The Cambridge Analytica scandal was only the most famous example. Broker data continues to fuel micro-targeted political messaging designed to exploit psychological weaknesses.

What Laws Regulate Data Brokers?

Regulation is patchy, fragmented, and rarely well-enforced, but the landscape is improving.

United States

California Consumer Privacy Act (CCPA/CPRA) — gives California residents the right to know, delete, and opt out of sale of their data. California also maintains a public data broker registry.
Vermont was the first U.S. state to require data brokers to register annually.
Texas, Oregon, and Colorado have since passed their own broker registration or opt-out laws.
The Delete Act (California, effective 2026) will allow residents to demand deletion from every registered broker with a single request.

European Union and United Kingdom

The GDPR and the UK Data Protection Act give residents strong rights: access, deletion ("right to be forgotten"), correction, and the right to object to processing. Brokers operating in Europe must have a lawful basis for holding your data and must respond to requests within 30 days.

Canada and Australia

Canada's PIPEDA and Australia's Privacy Act both grant access and correction rights, though enforcement against brokers has historically been weaker than in Europe.

How to Remove Your Data From Data Brokers

Opting out is tedious but effective. Here is a practical step-by-step process.

Search yourself first. Google your full name in quotes, along with your city. Note which people-search sites appear on the first three pages of results.
Visit each site's opt-out page. Most brokers hide opt-out forms deep in their footers. Search "[broker name] opt out" to find the correct URL.
Submit a deletion request. You will typically need to provide an email address (use a masked or alias email) and sometimes verify with a photo ID. Reputable brokers should not require a full SSN.
Track your requests. Keep a spreadsheet with the date submitted, confirmation number, and follow-up date. Brokers often re-add data after 6–12 months, so annual re-checks are essential.
Use official state channels. California residents can file a single Delete Act request. EU/UK residents can submit a GDPR Article 17 request to any broker by email.
Consider a paid removal service. Tools like DeleteMe, Kanary, Optery, and Incogni will send opt-out requests to hundreds of brokers on your behalf for roughly $100–$180 per year.

Priority Brokers to Opt Out of First

Whitepages
Spokeo
BeenVerified
Radaris
MyLife
Intelius
PeopleFinder
Acxiom
LexisNexis (via their consumer disclosure form)

How to Prevent Data Brokers From Collecting New Information

Removal is only half the battle — you also need to slow the flow of new data. These habits make a measurable difference.

Lock Down Your Browser

Switch to a privacy-first browser such as Brave, Firefox with strict tracking protection, or LibreWolf. Install uBlock Origin to block third-party tracking scripts, and enable encrypted DNS (DNS over HTTPS) in your browser settings to keep your lookups private from network intermediaries.

Use Email Aliases

Services like SimpleLogin, Fastmail Masked Email, and Apple's Hide My Email let you generate a unique address for every signup. If a broker or breach exposes one alias, you know exactly who leaked it — and you can disable it in seconds.

Give Fake or Minimal Information

Loyalty programs, warranty cards, and free Wi-Fi signups do not need your real birthday, phone number, or home address. Provide only what is legally required.

Shorten and Mask Links You Share

When you share a link publicly — on social media, in a bio, or in a newsletter — the destination URL can reveal referral parameters, campaign IDs, and other tracking data that eventually feeds broker profiles. Using a privacy-respecting short link service like Lunyb strips tracking parameters and keeps analytics under your control instead of handing them to third-party ad networks. You can learn more in our honest Lunyb review or compare alternatives in our 2026 URL shortener buyer's guide.

Audit Mobile App Permissions

Go through every app on your phone and revoke background location, contacts, and microphone permissions unless absolutely necessary. On iOS, enable "Ask App Not to Track." On Android, reset your advertising ID regularly and disable personalization.

Freeze Your Credit

Placing a free credit freeze with Equifax, Experian, and TransUnion (and Innovis in the U.S.) blocks new-account fraud and limits how much data credit bureaus can sell to pre-approved offer lists.

Are Paid Removal Services Worth It?

For most people, yes — if you value your time. Below is a quick comparison of the leading services in 2026.

Service	Brokers Covered	Annual Price	Best For
DeleteMe	750+	$129	Comprehensive removal with human agents
Optery	625+	$99–$249	Transparent tracking dashboards
Incogni	270+	$99	Budget-friendly automated requests
Kanary	350+	$179	Families and high-risk individuals
DIY (free)	Unlimited	$0	People with time and patience

Pros of Paid Services

Save 20+ hours per year
Handle re-appearances automatically
Provide progress reports and evidence
Some cover family members

Cons of Paid Services

You must give them your personal data to remove your personal data
Coverage varies — none reach every broker
Ongoing subscription cost
Cannot force truly non-compliant brokers to act

The Future of the Data Broker Industry

Momentum is shifting. Regulators in the U.S., EU, and Asia are drafting stricter rules, and consumer awareness is at an all-time high. Expect three trends to accelerate through 2026 and beyond:

One-stop deletion portals. California's Delete Act is likely to inspire similar single-request systems across other states and countries.
AI-driven profiling scrutiny. Regulators are increasingly focused on how brokers use machine learning to infer sensitive traits (health, sexuality, politics) without consent.
Privacy-first alternatives. Businesses that respect user data — from search engines to link shorteners — are winning market share from surveillance-based incumbents.

Frequently Asked Questions

Is it legal for data brokers to sell my personal information?

In most countries, yes — provided the broker complies with local privacy laws. In the EU and UK, brokers must have a lawful basis (usually legitimate interest) and honor deletion requests. In the U.S., legality varies by state, but the practice is broadly permitted with growing opt-out obligations.

How much money do data brokers make from my information?

Individual records are cheap — often fractions of a cent — but brokers profit by selling the same data to thousands of buyers across hundreds of segments. Industry-wide revenue is estimated at $250–$280 billion in 2026.

Can I sue a data broker that refuses to delete my information?

In the EU, UK, and California, yes. GDPR fines can reach 4% of global revenue, and California's CPRA allows private lawsuits for certain violations. Filing a complaint with your national data protection authority (ICO in the UK, CNIL in France, the FTC or state attorney general in the U.S.) is usually the fastest first step.

How often should I re-check data broker sites?

At least once every 6–12 months. Brokers frequently re-scrape public records, and your profile may reappear even after successful removal. Setting a recurring calendar reminder is the easiest way to stay on top of it.

Do private browsing or incognito modes stop data brokers?

Not really. Incognito mode only prevents your local browser from saving history — it does nothing to stop tracking scripts, fingerprinting, or ad-tech data collection. For meaningful protection you need tracker-blocking browsers, script blockers, encrypted DNS, and disciplined data-sharing habits.

Final Thoughts

The data broker industry thrives on obscurity. The moment you learn how it works, you can push back — one opt-out form at a time. Start with the biggest people-search sites, layer on browser hardening and email aliases, and consider a paid removal service if your time is limited. Combined with cautious sharing habits and privacy-respecting tools, these steps dramatically shrink your digital footprint and make you a far less profitable target for the invisible market in personal information.

Privacy is not achieved in a single afternoon, but every broker you remove yourself from is one less database feeding advertisers, scammers, and surveillance actors. The work is worth it.