Data Brokers: Who Is Selling Your Personal Information in 2026

Every time you sign up for a newsletter, apply for a loyalty card, or scroll through a mobile app, someone is taking notes. That someone is often a data broker — a company that collects, packages, and sells your personal information to advertisers, insurers, employers, political campaigns, and even law enforcement. The industry is worth over $280 billion globally, and most consumers have no idea their profiles exist.

This guide breaks down who these companies are, how they get your data, what they sell it for, and what you can actually do to reclaim your privacy.

What Are Data Brokers?

Data brokers are businesses that aggregate personal information about individuals from thousands of public and private sources, then sell that information to third parties. Unlike social networks or retailers you interact with directly, most data brokers have no consumer-facing relationship with you — you've likely never heard of them, yet they may hold hundreds of data points about your life.

The Federal Trade Commission has identified three broad categories of data brokers:

1. Marketing brokers — sell profiles used for targeted advertising and lead generation.
2. Risk mitigation brokers — supply data to banks, insurers, and landlords for fraud checks and background screening.
3. People search brokers — publish dossiers online that anyone can buy for a few dollars.

How Data Brokers Collect Your Information

Data brokers rarely need to hack anyone. Most of the information they hold is freely offered, quietly harvested, or legally purchased. Here are the primary pipelines feeding the industry.

1. Public Records

Court filings, property deeds, voter registrations, marriage licenses, and business registrations are all fair game. Brokers scrape millions of government databases and combine them with other identifiers.

2. Commercial Sources

Retailers sell purchase histories. Loyalty programs share buying patterns. Warranty registrations, magazine subscriptions, and charitable donations often carry fine print permitting resale of your information.

3. Mobile Apps and SDKs

Free apps frequently embed software development kits (SDKs) from advertising and analytics companies. These SDKs quietly transmit location data, device identifiers, and behavioral patterns back to brokers — sometimes updating hundreds of times per hour.

4. Web Tracking

Cookies, pixels, and fingerprinting scripts follow you across sites. Even without logging in, brokers can stitch your browsing history to a persistent profile.

5. Data Breaches and Leaked Databases

Some brokers acquire data from questionable sources, including scraped social media profiles and databases exposed in breaches.

Who Are the Biggest Data Brokers?

The industry ranges from Fortune 500 giants to shadowy people-search sites. Here are some of the most influential players.

Company	Primary Focus	Estimated Records	Founded
Acxiom (LiveRamp)	Marketing profiles	2.5 billion consumers	1969
Experian	Credit + marketing	1 billion+	1996
Equifax	Credit + risk	800 million+	1899
Epsilon (Publicis)	Marketing + email	250 million U.S. adults	1969
Oracle Data Cloud	Ad targeting	Billions of signals	2014
CoreLogic	Property + financial	4.5 billion records	2010
Spokeo, BeenVerified, Whitepages	People search	Hundreds of millions	Various

What Do They Actually Know About You?

A typical broker profile is not just a name and address. It can include thousands of attributes, sold under categories called "audience segments." Real segments discovered by researchers include:

• Estimated household income and net worth
• Home ownership status and mortgage balance
• Health conditions inferred from purchases (e.g., "diabetic household," "expectant parent")
• Religious affiliation and political leanings
• Sexual orientation (inferred)
• Precise GPS location history
• Financial vulnerability ("rural and barely making it," "credit crunched")
• Gambling habits and alcohol consumption
• Vehicle ownership, driving patterns, and insurance risk score
• Online dating activity

Some of these categories have drawn regulatory scrutiny because they enable discrimination in housing, credit, and employment decisions — often without the affected person ever knowing.

Who Buys Data From Brokers?

The customer list is broader than most people realize:

1. Advertisers and ad tech platforms — for targeting and measurement.
2. Banks, insurers, and lenders — for underwriting and fraud detection.
3. Employers and background check firms — for pre-employment screening.
4. Landlords and property managers — for tenant screening.
5. Political campaigns — for voter targeting and persuasion modeling.
6. Government agencies — including immigration and law enforcement, who purchase data they'd otherwise need a warrant to obtain.
7. Debt collectors and private investigators.
8. Scammers and stalkers — who exploit low-friction people-search sites.

Why This Matters: Real-World Harms

The abstract idea of "data collection" becomes concrete when you look at documented harms.

Discrimination in Housing and Hiring

Investigations have shown ad platforms allowing exclusion of certain zip codes or demographics from housing listings — often powered by broker data.

Insurance and Loan Pricing

Life and auto insurers increasingly use non-traditional broker data (shopping habits, social connections) to set premiums, sometimes producing higher prices for lower-income households.

Stalking and Domestic Abuse

People-search sites publish home addresses, phone numbers, and relatives' names. Abusers, doxxers, and stalkers have used these sites to locate victims — including in cases that ended in violence.

Identity Theft

Broker databases become goldmines when breached. The 2017 Equifax breach exposed 147 million Americans' most sensitive financial identifiers.

Government Surveillance Without Warrants

Agencies have purchased location data from brokers to track individuals without judicial oversight, a workaround privacy advocates argue undermines constitutional protections.

The Legal Landscape in 2026

Regulation is finally catching up — unevenly.

United States

There's still no comprehensive federal privacy law, but state-level protections are expanding. California (CCPA/CPRA), Colorado, Connecticut, Virginia, Texas, Oregon, and more than a dozen other states now grant residents rights to access, delete, and opt out of the sale of their data. California's Delete Act, fully in force by 2026, requires the state to build a one-stop deletion mechanism covering all registered data brokers.

European Union and UK

The GDPR treats broker data collection as processing that generally requires a lawful basis and transparent disclosure. Enforcement has resulted in multi-million-euro fines against major brokers.

Canada, Australia, and Beyond

Canada's PIPEDA and Australia's Privacy Act reforms give consumers meaningful access and correction rights, though enforcement remains inconsistent.

How to Remove Yourself From Data Brokers

Reducing your exposure takes effort, but it's absolutely doable. Here's a practical, prioritized plan.

Step 1: Start With People-Search Sites

These are the most visible and dangerous. Visit each of the following and submit opt-out requests:

• Spokeo
• BeenVerified
• Whitepages
• Intelius
• PeopleFinder
• Radaris
• MyLife
• FastPeopleSearch

Each has its own process, often buried in the footer. Expect to spend 10–20 minutes per site.

Step 2: Opt Out of Marketing Brokers

Larger brokers like Acxiom, Epsilon, Oracle, and LiveRamp offer consumer opt-out portals. The Digital Advertising Alliance (optout.aboutads.info) and Network Advertising Initiative (optout.networkadvertising.org) provide bulk opt-outs for ad targeting cookies.

Step 3: Exercise Your State or Country Rights

If you live in a state or country with privacy legislation, use formal deletion requests. Templates are available from the Electronic Frontier Foundation and Privacy Rights Clearinghouse.

Step 4: Consider a Paid Removal Service

Services like DeleteMe, Kanary, Optery, and Incogni continuously monitor and remove your data from dozens of brokers for $8–$15 per month. For most people the time savings justify the cost.

Step 5: Reduce Ongoing Collection

1. Use a privacy-focused browser (Brave, Firefox with strict tracking protection, or Safari with Intelligent Tracking Prevention).
2. Switch to encrypted DNS (Cloudflare 1.1.1.1, NextDNS, or Quad9) to reduce network-level tracking.
3. Install a reputable content blocker like uBlock Origin.
4. Use email aliases (SimpleLogin, Firefox Relay, Apple Hide My Email) so newsletter signups can't be linked back to your primary identity.
5. Deny mobile apps location and advertising ID access by default.
6. Reset your mobile advertising ID monthly, or disable it entirely.

Protecting Yourself When Sharing Links

One overlooked vector is the URLs you share. Many free link shorteners inject tracking parameters, log referrer data, and monetize your click streams by selling behavioral data to advertising exchanges — feeding the same broker pipelines described above.

Choosing a privacy-respecting shortener matters. Lunyb is designed to minimize data collection: it doesn't build advertising profiles from your clicks or resell analytics data to third parties. If you're curious about how it stacks up against alternatives, our 2026 buyer's guide to URL shorteners and our honest review of Lunyb break down the tradeoffs. For a competitor comparison, see our Rebrandly review.

The Future of the Data Broker Industry

Three trends are reshaping the landscape:

1. Regulatory Pressure Is Mounting

The FTC has begun taking enforcement actions against location data brokers, and the Consumer Financial Protection Bureau is treating some brokers as consumer reporting agencies subject to the Fair Credit Reporting Act.

2. AI Is Making Profiles More Powerful — and More Invasive

Machine learning models can now infer sensitive attributes (health, sexuality, immigration status) from innocuous signals like typing patterns and app usage. This raises the stakes for even seemingly minor data leaks.

3. Consumers Are Fighting Back

Adoption of tracker blockers, encrypted messaging, and deletion services is rising sharply among people under 40. Regulators are following the political momentum.

Frequently Asked Questions

Is it legal for data brokers to sell my personal information?

In most jurisdictions, yes — with limits. Public records and information you've "consented" to share (often via lengthy terms of service) can generally be resold. However, laws like the GDPR, CCPA, and a growing patchwork of U.S. state statutes give you rights to access, correct, and demand deletion of your data, and to opt out of its sale.

How much is my personal data worth to a data broker?

Individually, very little — often fractions of a cent per data point. But brokers aggregate billions of records, and specialized segments (e.g., verified high-net-worth individuals, or people with specific medical conditions) can sell for $0.50 to several dollars per profile. The industry's value comes from scale.

Do opt-outs actually work?

Yes, but with caveats. Reputable brokers do honor opt-out requests, but many will re-add your profile if new data appears from public records. This is why continuous removal services exist. For people-search sites specifically, opt-outs are effective in the short term but require periodic re-checking.

Can I sue a data broker for privacy violations?

In some cases, yes. California's CCPA provides a limited private right of action for certain data breaches. GDPR grants EU residents the right to compensation for material and non-material damages caused by unlawful processing. Class actions against major brokers have resulted in substantial settlements. Consult a privacy attorney if you believe you've been harmed.

What's the single most impactful step I can take today?

If you only do one thing, submit opt-out requests to the top five people-search sites (Spokeo, BeenVerified, Whitepages, Intelius, Radaris). These are the sources most commonly exploited by scammers, stalkers, and doxxers, and removing yourself dramatically reduces the risk of targeted harm. Follow up by signing up for a continuous removal service if your budget allows.

Final Thoughts

The data broker industry thrives on obscurity. Most consumers don't know these companies exist, can't name the ones holding their profiles, and don't realize they have the legal right to demand deletion. That information asymmetry is exactly how the business model works.

The good news: awareness is the hardest step, and you've already taken it. From here, a few hours of opt-outs, a switch to privacy-respecting tools, and ongoing vigilance can meaningfully shrink your data footprint. Privacy in 2026 isn't binary — it's a spectrum, and every step toward the private end is one your future self will thank you for.