Data Brokers: Who Is Selling Your Personal Information in 2026

Every time you sign up for a loyalty program, download a free app, or browse a news site, invisible companies are quietly building a profile about you. These companies are called data brokers, and they operate a multi-billion-dollar industry built almost entirely on the collection, packaging, and resale of your personal information. Most people have never heard of them, yet these firms may know your income, health conditions, political leanings, shopping habits, and even your daily location patterns.

This guide explains exactly who data brokers are, how they get your information, who buys it, and — most importantly — what you can do to take back control.

What Are Data Brokers?

Data brokers are companies that collect personal information about individuals from a wide range of sources and then sell, license, or share that information with third parties. They rarely have a direct relationship with the consumers whose data they trade, which is what makes the industry so opaque.

The global data broker market was valued at over $280 billion in 2024 and continues to grow rapidly. Major players include Acxiom, Experian, Epsilon, CoreLogic, LiveRamp, Oracle Data Cloud, and hundreds of smaller specialty firms that focus on niches like health data, automotive data, or political affiliations.

The Three Main Types of Data Brokers

Marketing and advertising brokers — Build consumer profiles used for targeted ads, direct mail, and email campaigns.
Risk mitigation brokers — Sell data to banks, insurers, and employers for fraud detection, background checks, and underwriting.
People-search brokers — Publish personal details (addresses, phone numbers, relatives, age) on public websites like Spokeo, BeenVerified, and Whitepages.

How Data Brokers Collect Your Personal Information

Data brokers rarely collect information directly. Instead, they aggregate it from thousands of sources — often legally, but in ways most consumers would find deeply unsettling.

Common Data Sources

Public records — Property deeds, court filings, voter registrations, marriage and divorce records, business licenses.
Commercial sources — Loyalty programs, warranty registrations, magazine subscriptions, retail purchase histories.
Online tracking — Cookies, tracking pixels, browser fingerprinting, and software development kits (SDKs) embedded in mobile apps.
Social media — Public profiles, likes, comments, and connections scraped at scale.
Location data — Sold by weather apps, navigation tools, and games that request GPS permissions.
Data partnerships — Brokers routinely trade datasets with each other to fill in missing fields.

What They Actually Know About You

A typical consumer profile assembled by a large broker can contain 1,500 to 3,000 individual data points. These may include:

Full name, age, gender, home address, and phone numbers
Estimated household income and net worth
Marital status, number and ages of children
Ethnicity, religion, and languages spoken
Health conditions inferred from purchases or search behavior
Political affiliation and likelihood to vote
Vehicle ownership, home value, and mortgage details
Hobbies, travel patterns, and shopping preferences
Precise geolocation history in some cases

Who Buys Data From Data Brokers?

The buyers are far more diverse than most people realize. Understanding the buyer side reveals why the industry is so lucrative — and so persistent.

Buyer Category	Typical Use Case	Risk to You
Advertisers & retailers	Targeted marketing, lookalike audiences	Low to moderate
Insurance companies	Risk scoring, premium pricing	Higher premiums, coverage denial
Banks & lenders	Credit decisions, fraud detection	Loan denials, credit line changes
Employers & recruiters	Background checks, screening	Hiring discrimination
Government agencies	Investigations, immigration enforcement	Surveillance without a warrant
Political campaigns	Voter targeting, persuasion messaging	Manipulation, echo chambers
Scammers & stalkers	Phishing, harassment, identity theft	Severe personal harm

Why Data Brokers Selling Personal Information Is a Problem

The core issue is consent. You never signed a contract with Acxiom or Epsilon, yet they may hold thousands of details about your life. When something goes wrong, the consequences can be severe.

Real-World Harms

Discrimination — Broker data has been used to exclude specific demographic groups from housing, credit, and job advertisements.
Stalking and violence — People-search sites have repeatedly been linked to stalking cases, including tragic outcomes involving domestic abuse victims and public figures.
Identity theft — Data breaches at brokers (like the 2024 National Public Data breach that exposed nearly 3 billion records) hand criminals ready-made identity kits.
Price discrimination — Retailers and travel sites use broker data to show different prices to different users.
Warrantless surveillance — Several governments now purchase location and communication metadata from brokers to bypass legal restrictions on direct collection.

The Legal Landscape in 2026

Regulation is finally catching up, though enforcement remains uneven across regions.

Key Regulations

GDPR (European Union) — Requires a lawful basis for processing and gives users rights to access, correct, and delete their data.
CCPA / CPRA (California) — Grants Californians the right to opt out of the sale of their personal information and to request deletion.
Data Broker Registration Laws — California, Vermont, Texas, and Oregon now require data brokers to register publicly, making the industry slightly more transparent.
DELETE Act (California, 2026) — Creates a single portal where residents can request deletion from every registered broker at once.
UK Data Protection Act & PIPEDA (Canada) — Provide similar rights to consumers in their respective jurisdictions.

Despite these laws, thousands of brokers operate outside registered jurisdictions, and enforcement actions remain rare compared to the scale of the industry.

How to Find Out What Data Brokers Know About You

You have a legal right in many regions to request a copy of the information brokers hold on you. Here's how to start.

Search yourself on people-search sites like Spokeo, BeenVerified, Whitepages, MyLife, and PeopleFinder. Note which sites show your information.
Check the California Data Broker Registry at oag.ca.gov — even non-residents can see which companies are active.
Request your data from major aggregators like Acxiom, Epsilon, and Oracle using their Subject Access Request forms.
Review your ad profile on Google (My Ad Center) and Meta (Ad Preferences) to see the categories advertisers have tagged you with.
Use a breach checker like Have I Been Pwned to see which brokers have leaked your data historically.

How to Remove Yourself From Data Broker Databases

Opting out is possible but tedious. Each broker has its own process, and many require repeated requests because databases are refreshed constantly.

Manual Opt-Out Steps

Make a list of the top 30–50 brokers that publish or sell your data.
Visit each broker's opt-out page and submit a removal request.
Verify your identity (many require a photo ID — redact your ID number before uploading).
Save confirmation emails and screenshots.
Re-check every 3–6 months, as profiles often reappear.

Paid Removal Services

Services like DeleteMe, Kanary, Optery, and Incogni automate the opt-out process for a subscription fee (typically $100–$180/year). They handle recurring removals and can save dozens of hours annually. Independent testing suggests they remove 40–70% of listings within the first three months.

Everyday Habits That Reduce Data Broker Exposure

Prevention is more effective than removal. Small changes to daily habits dramatically reduce how much new data brokers can collect about you.

Practical Privacy Habits

Use a privacy-focused browser like Brave, Firefox with strict tracking protection, or LibreWolf.
Enable encrypted DNS (DNS over HTTPS or DNS over TLS) to prevent your internet provider from logging every domain you visit.
Install a reputable content blocker such as uBlock Origin to stop tracking pixels before they load.
Use email aliases from services like SimpleLogin, Firefox Relay, or Apple's Hide My Email when signing up for accounts.
Give fake or minimal information to loyalty programs — brokers can't sell what you never provided.
Turn off ad IDs on your phone (Settings > Privacy on iOS and Android).
Audit app permissions monthly and revoke unnecessary access to location, contacts, and microphone.
Use a link shortener that respects privacy when sharing URLs. Tools like Lunyb let you share links without exposing your original URLs or handing over analytics to major ad-tech networks. You can read our honest review of Lunyb or compare it against alternatives in our 2026 URL shortener buyer's guide.

The Future of the Data Broker Industry

Three major trends are reshaping the industry in 2026 and beyond.

1. AI-Driven Profiling

Large language models and machine learning make it possible to infer sensitive attributes — sexual orientation, mental health status, pregnancy — from seemingly innocuous data. This means opting out of explicit categories no longer protects you from inference.

2. Regulatory Fragmentation

As more U.S. states pass their own privacy laws, brokers face a patchwork of requirements. A federal U.S. privacy law remains stalled, leaving consumers with vastly different rights depending on ZIP code.

3. Consumer Pushback and Privacy Tech

Demand for privacy-first tools — encrypted messaging, private browsers, tracker-blocking DNS, and privacy-respecting link tools — is growing rapidly. Younger users in particular are increasingly willing to pay for services that don't monetize their data.

Frequently Asked Questions

Is it legal for data brokers to sell my personal information?

In most countries, yes — provided the broker complies with local privacy laws. In the EU and UK, brokers must have a lawful basis under GDPR. In California, they must honor opt-out requests. In many other regions, the practice is largely unregulated, which is why removal can be so difficult.

How much money do data brokers make from my information?

Individual profiles typically sell for fractions of a cent to a few dollars each, depending on the depth and freshness of the data. However, brokers sell your profile hundreds or thousands of times to different clients, and the aggregate industry revenue exceeds $280 billion annually.

Will opting out really stop data brokers from collecting my information?

Opting out stops a specific broker from displaying or selling your existing profile, but it doesn't prevent new data from being collected. You'll need to combine opt-outs with preventive habits — tracker blockers, encrypted DNS, email aliases, and minimal data sharing — to see meaningful long-term results.

Are free people-search sites the biggest privacy threat?

They're the most visible threat because anyone can look you up in seconds. However, the marketing and risk-scoring brokers you never see are arguably more consequential because they influence loan approvals, insurance rates, and job offers. Both categories deserve attention.

How often should I re-run data broker opt-outs?

Every three to six months at minimum. Brokers frequently repopulate their databases from fresh public records, and new brokers appear constantly. Automated removal services handle this cadence for you, which is why they're worth considering if your time is limited.

Final Thoughts

The data broker industry thrives on invisibility. The single most powerful action you can take is simply understanding that it exists and adjusting your habits accordingly. Combine that awareness with opt-outs, privacy-respecting tools, and minimal data sharing, and you can meaningfully shrink your digital footprint — even if you can't eliminate it entirely.

Privacy in 2026 isn't about disappearing from the internet. It's about making informed choices, using tools that don't exploit you, and pushing back against an industry that has operated in the shadows for far too long.