Data Brokers: Who Is Selling Your Personal Information in 2026

Every time you sign up for a newsletter, click an ad, download a free app, or fill out a warranty card, a hidden industry takes note. That industry — the data broker economy — is now worth more than $250 billion globally, and its entire business model depends on one thing: selling information about you. Most people have never heard of the companies profiting from their private lives, yet these firms hold thousands of data points on nearly every adult in the developed world.

This guide breaks down exactly who data brokers are, how they get your information, who buys it, and what you can do to take control.

What Are Data Brokers?

Data brokers are companies that collect, aggregate, analyze, and sell personal information about consumers to third parties. They typically operate without ever interacting directly with the people whose data they trade, making the industry largely invisible to the average person.

Unlike social media platforms or retailers, which collect data as a byproduct of a service, data brokers exist for the sole purpose of profiling human beings and monetizing those profiles. A single broker may hold anywhere from 500 to 3,000 data points per individual, including your name, address history, income bracket, health conditions, political leanings, shopping habits, and even the type of car you drive.

The Three Main Categories of Data Brokers

1. Marketing and advertising brokers — Sell audience segments to advertisers who want to target specific demographics.
2. Risk mitigation brokers — Provide data to banks, insurers, and employers for fraud detection, credit decisions, and background checks.
3. People search sites — Publicly display personal information such as addresses, phone numbers, relatives, and court records for anyone willing to pay a small fee.

How Data Brokers Collect Your Personal Information

Data brokers rarely obtain information through hacking or illegal means. Instead, they rely on a sprawling network of legal — and often invisible — collection methods.

Common Data Collection Sources

• Public records: Court filings, voter registrations, property deeds, marriage licenses, and business registrations.
• Commercial sources: Loyalty programs, warranty cards, magazine subscriptions, and product registrations.
• Web tracking: Cookies, pixels, and fingerprinting scripts embedded on millions of websites.
• Mobile apps: SDKs baked into free apps that transmit location, contacts, and device data.
• Purchased datasets: Information bought from other brokers, retailers, or breached databases resold on gray markets.
• Social media scraping: Automated harvesting of public posts, photos, and connections.

Once collected, this raw data is cleaned, matched to a persistent identifier (often a hashed email or device ID), and combined into a rich behavioral profile. That profile can then be rented or sold thousands of times over.

The Biggest Data Brokers You've Never Heard Of

While Google and Meta dominate headlines about data collection, the largest brokers operate quietly in the background. Below is a comparison of some of the industry's most influential players.

Company	Primary Business	Estimated Consumer Records	Main Customers
Acxiom (LiveRamp)	Marketing data and identity resolution	2.5 billion+ consumers	Advertisers, Fortune 500 brands
Experian	Credit reporting and marketing data	1 billion+ consumers	Lenders, insurers, marketers
Epsilon	Marketing and loyalty data	250 million+ US consumers	Retail, travel, financial services
Oracle Data Cloud	Audience targeting (winding down)	1 billion+ profiles	Digital advertisers
CoreLogic	Property and financial data	4.5 billion+ records	Real estate, insurance, government
LexisNexis Risk Solutions	Risk and identity verification	Billions of records	Insurance, legal, law enforcement
Spokeo / BeenVerified / Whitepages	People search	Hundreds of millions	General public, employers

Who Buys Your Personal Information?

The market for personal data is far broader than most people realize. Buyers range from legitimate businesses making everyday decisions to less scrupulous actors exploiting loopholes.

Typical Buyers of Broker Data

• Advertisers and marketers use segments like "new parents earning $75k+" to target campaigns with surgical precision.
• Insurance companies factor in lifestyle data — such as gym memberships or fast-food purchases — when calculating premiums.
• Employers and landlords run background checks that pull from broker databases in addition to official records.
• Political campaigns build voter models to microtarget messaging and predict turnout.
• Government agencies, including law enforcement and immigration authorities, purchase data to sidestep legal restrictions on direct collection.
• Debt collectors and skip tracers use broker services to locate individuals.
• Scammers and fraudsters buy leads targeted at vulnerable groups, especially seniors.

The Real Risks of Data Brokers Selling Personal Information

The consequences of the data broker economy extend well beyond annoying ads. When your information is available for purchase, the downstream harms can be serious and lasting.

Identity Theft and Fraud

Broker databases have repeatedly appeared in criminal marketplaces after breaches. The 2023 National Public Data breach alone exposed 2.7 billion records, including Social Security numbers, giving criminals a decade's worth of ammunition for identity theft.

Discrimination and Price Gouging

Studies have shown that algorithms fed with broker data can effectively redline consumers — charging higher prices, denying loans, or excluding certain groups from job ads based on protected characteristics inferred from data.

Physical Safety

People search sites make it trivially easy for stalkers, abusive ex-partners, or online harassers to locate a target's home address. Journalists, judges, and abuse survivors have been particularly affected.

Erosion of Autonomy

When every click and purchase feeds an ever-growing profile, meaningful choice erodes. Prices, opportunities, and even the news you see are shaped by inferences you never consented to.

The Legal Landscape in 2026

Regulation is finally catching up with the industry, but enforcement remains uneven across regions.

United States

California (CCPA/CPRA), Virginia, Colorado, Connecticut, Texas, and more than a dozen other states now require brokers to register and honor deletion requests. California's Delete Act, in force from 2026, will allow residents to remove their data from every registered broker with a single request through a state-run portal.

European Union and UK

GDPR gives residents strong rights to access, correct, and delete personal data held by brokers. The UK's Data Protection Act mirrors most of these protections.

Rest of the World

Brazil's LGPD, Canada's PIPEDA, Australia's Privacy Act reforms, and India's DPDP Act all provide varying degrees of control, though enforcement against foreign brokers remains challenging.

How to Remove Your Data From Brokers

Reclaiming your privacy takes effort, but it's absolutely possible. Here is a practical, step-by-step process.

1. Audit your exposure. Search your name, phone number, and email on Google and on major people search sites (Spokeo, BeenVerified, Whitepages, Radaris, MyLife) to see what appears.
2. Submit opt-out requests. Every major broker has an opt-out page, though they intentionally bury them. Look for links titled "Do Not Sell My Personal Information," "Privacy Choices," or "Suppress My Record."
3. Send formal deletion demands. If you live in a covered jurisdiction (California, EU, UK, etc.), cite your legal rights explicitly. Brokers must respond within 30–45 days.
4. Use a removal service. Services such as DeleteMe, Kanary, Optery, and Incogni automate opt-outs across hundreds of brokers for $10–$25 per month.
5. Repeat every 3–6 months. Brokers repopulate their databases from fresh sources, so removal is not permanent.
6. Lock down future collection. Use privacy-respecting browsers (Brave, Firefox with strict tracking protection), encrypted DNS resolvers, disable ad IDs on your phone, and think twice before handing out your real email or phone number.

Reducing Your Digital Footprint Going Forward

Removing existing data is only half the battle. Preventing new data from being harvested is what makes privacy sustainable.

Practical Privacy Habits

• Use email aliases (SimpleLogin, Firefox Relay, Apple Hide My Email) so each site sees a different address.
• Give a secondary phone number (Google Voice, MySudo) for signups and loyalty cards.
• Pay with virtual cards (Privacy.com, Revolut disposable cards) to break the link between purchases and your identity.
• Choose privacy-respecting tools. When you need to share a link — for marketing, social media, or personal use — pick a shortener that doesn't itself become a broker of your click data. Transparent, privacy-conscious platforms like Lunyb minimize the tracking baggage many URL shorteners carry, and our 2026 shortener buyer's guide compares options on exactly this criterion.
• Review app permissions monthly and revoke anything that doesn't need location, contacts, or background access.
• Turn off ad personalization on Google, Meta, Apple, Microsoft, and Amazon accounts.

The Future of the Data Broker Industry

Three trends will define the next few years:

1. Consolidation. Expect large identity-resolution firms like LiveRamp and Experian to absorb smaller brokers as third-party cookies disappear.
2. Regulatory pressure. More US states will pass Delete Act-style laws, and the FTC has signaled aggressive enforcement against brokers selling sensitive categories like location and health data.
3. AI-driven inference. Even with less raw data, brokers will use machine learning to infer sensitive traits from innocuous signals — meaning privacy protections must evolve beyond simple "do not collect" rules.

The takeaway: the data broker economy isn't going away, but individual users have more power in 2026 than ever before. Awareness, a handful of good habits, and quarterly cleanup are enough to shrink your profile dramatically.

Frequently Asked Questions

Is it legal for data brokers to sell my personal information?

In most jurisdictions, yes — as long as brokers comply with local privacy laws. In the US, there is no comprehensive federal law, so legality depends on the state. In the EU, UK, Brazil, and Canada, brokers must have a lawful basis and honor user rights, but the trade itself is legal.

How much is my personal data worth to a broker?

Individually, very little — often a fraction of a cent per data point. However, when aggregated into a full profile and licensed to thousands of buyers, a single consumer's data can generate hundreds of dollars per year for the broker ecosystem.

Can I completely remove myself from all data brokers?

Not permanently. You can dramatically reduce your presence — often by 80–95% — using opt-outs and removal services, but public records and new data sources will always feed brokers back some information. Ongoing maintenance every few months is essential.

Are free people search opt-outs enough, or should I pay for a service?

Free opt-outs work if you have the time to file 100+ requests and follow up every quarter. Paid services (DeleteMe, Optery, Incogni) save dozens of hours per year and cover more obscure brokers. For most people, the $100–$250 annual cost is worth it.

Do data brokers sell information about children?

US federal law (COPPA) restricts collection from children under 13, but enforcement is spotty and teens are largely unprotected. Several brokers have been fined for collecting student data through education tech vendors. Parents should audit apps their children use and opt kids out where possible.