Data Brokers: Who Is Selling Your Personal Information in 2026

Every time you fill out a warranty card, sign up for a loyalty program, or scroll through a free app, invisible companies are quietly cataloging your life. These companies are called data brokers, and together they form a multi-billion dollar industry built almost entirely on information about you. Most people have never heard of the firms selling their names, addresses, incomes, health conditions, and browsing habits to the highest bidder.

In this guide, we'll pull back the curtain on data brokers selling personal information, explain how the ecosystem works, identify the biggest players, and walk you through concrete steps to reclaim some control over your digital footprint.

What Are Data Brokers?

Data brokers are companies that collect personal information about consumers from a wide range of sources and then sell, license, or share that information with other businesses. They typically operate without any direct relationship with the people whose data they trade, which is why most consumers have no idea their profiles exist.

The industry is enormous. Analysts estimate the global data broker market will exceed $450 billion by the end of the decade. Thousands of firms participate, ranging from household-name credit bureaus to obscure marketing databases you've never heard of. What unites them is a business model that treats your identity as inventory.

The Three Main Types of Data Brokers

Marketing and advertising brokers — build audience segments for targeted advertising, direct mail, and email campaigns.
Risk mitigation and fraud detection brokers — supply identity verification and fraud scoring services to banks, insurers, and landlords.
People search sites — publish consumer profiles online, often making names, addresses, phone numbers, and relatives searchable to anyone.

How Data Brokers Collect Your Personal Information

Data brokers rarely ask for consent directly. Instead, they aggregate information from dozens of sources, cross-reference it, and build detailed dossiers that can contain thousands of individual data points per person.

Common Collection Sources

Public records — court filings, property deeds, voter registrations, marriage licenses, and bankruptcy records.
Commercial transactions — purchase histories from retailers, loyalty programs, and warranty registrations.
Online tracking — cookies, pixels, device fingerprinting, and browsing behavior across millions of websites.
Mobile apps — location data, contact lists, and in-app behavior shared through advertising SDKs.
Social media — public profiles, posts, likes, and connections scraped at scale.
Surveys and sweepstakes — "free" entries that double as data collection funnels.
Credit and financial data — purchased or licensed from financial institutions and credit bureaus.

What's in Your Profile?

A typical broker profile may include your full name, aliases, current and past addresses, phone numbers, email addresses, date of birth, estimated income, net worth, education level, occupation, political affiliation, religious beliefs, ethnicity, marital status, number of children, pet ownership, health conditions, prescription history, hobbies, vacation preferences, vehicle details, and the exact brands you buy. Some brokers maintain more than 1,500 attributes per person.

Who Are the Biggest Data Brokers?

While thousands of firms operate in this space, a handful dominate the market. Below is a comparison of some of the most influential data brokers selling personal information today.

Company	Primary Focus	Approx. Profiles	Headquarters
Acxiom (LiveRamp)	Marketing, consumer insights	2.5+ billion	USA
Experian	Credit, marketing, risk	1+ billion	Ireland/USA
Equifax	Credit, identity, workforce data	800+ million	USA
Oracle Data Cloud	Advertising audiences	5+ billion device IDs	USA
CoreLogic	Property, mortgage, insurance	99% of US properties	USA
Epsilon	Marketing, loyalty programs	250+ million	USA
Spokeo / BeenVerified	People search	Hundreds of millions	USA
TransUnion	Credit, fraud prevention	1+ billion	USA

Who Buys Your Data?

The buyers of broker data are nearly as varied as the collectors. Understanding who's on the other end of the transaction helps clarify why this industry exists at all.

Advertisers and brands use audience segments to deliver targeted ads across the web, social platforms, and connected TV.
Banks and insurers purchase risk scores and verification data to approve loans, set premiums, or detect fraud.
Political campaigns buy voter profiles to microtarget messaging during election cycles.
Employers and landlords run background checks that pull from broker databases.
Debt collectors and private investigators use people search tools to locate individuals.
Government agencies — including law enforcement and intelligence services — have been shown to purchase commercial data to bypass warrant requirements.
Scammers and fraudsters occasionally obtain broker data through leaks, breaches, or thinly disguised business accounts.

The Real Risks of the Data Broker Economy

It's easy to shrug off targeted advertising, but the consequences of unchecked data brokering extend far beyond annoying ads.

1. Identity Theft and Fraud

Brokers hold the exact combination of personal details — name, date of birth, address history, mother's maiden name — that identity thieves need. When brokers suffer breaches, as happened in the 2017 Equifax incident affecting 147 million people, that data flows directly to criminal marketplaces.

2. Discrimination and Price Gouging

Insurance pricing, loan approvals, and even job opportunities can be influenced by broker data. Studies have documented price discrimination where consumers in different ZIP codes see different prices for identical products based on inferred income and demographics.

3. Stalking and Harassment

People search sites make it trivially easy for abusers, stalkers, and harassers to locate victims. Several high-profile tragedies have been linked to information purchased from data brokers.

4. Erosion of Autonomy

When algorithms predict your behavior with uncanny accuracy, the line between prediction and manipulation blurs. Micro-targeted content can nudge political views, spending habits, and lifestyle choices in ways you'd never consciously accept.

5. Health and Reproductive Privacy

Location data purchased from brokers has been used to identify visitors to specific clinics, religious sites, and support groups. In jurisdictions where certain health procedures are criminalized, this data becomes a direct threat to personal safety.

How to Protect Yourself from Data Brokers

You can't eliminate your digital footprint entirely, but you can shrink it substantially. The following steps make a real difference.

Step 1: Opt Out of Major Brokers

Most large brokers offer an opt-out process, though they rarely advertise it. Start with Acxiom, Epsilon, Experian marketing, Oracle, and the big people search sites (Spokeo, BeenVerified, Whitepages, Intelius, MyLife, PeopleFinder). Expect each opt-out to take 5–15 minutes and require re-verification every 6–12 months.

Step 2: Use a Data Removal Service

If manual opt-outs feel overwhelming, services like DeleteMe, Kanary, Optery, and Incogni will handle hundreds of brokers on your behalf for a yearly fee. They don't catch everything, but they drastically reduce exposure.

Step 3: Lock Down Browser and Device Tracking

Switch to a privacy-focused browser such as Brave, Firefox (hardened), or LibreWolf.
Install tracker-blocking extensions like uBlock Origin and Privacy Badger.
Enable encrypted DNS (DoH or DoT) with a privacy-respecting provider such as Quad9 or NextDNS.
Disable the advertising ID on iOS and Android, and reset it regularly.
Review app permissions and revoke location access from apps that don't genuinely need it.

Step 4: Use Email Aliases and Masked Phone Numbers

Services such as SimpleLogin, Firefox Relay, and Apple's Hide My Email generate disposable addresses that forward to your real inbox. This breaks the ability of brokers to correlate your activity across sites. For phone numbers, consider a secondary line through MySudo or Google Voice.

Step 5: Be Careful What You Share

Loyalty programs, sweepstakes, and "free" quizzes are data broker gold mines. Treat every form field as public. When sharing links online — especially on social platforms — consider using a privacy-respecting URL shortener like Lunyb, which lets you share destinations without exposing the raw URL or leaking referrer context to every intermediary. You can read more in our honest Lunyb review or our 2026 shortener comparison.

Step 6: Freeze Your Credit

In the United States, placing a credit freeze with Equifax, Experian, and TransUnion is free and blocks new credit from being opened in your name. Similar protections exist in the UK, EU, and other regions.

The Legal Landscape in 2026

Regulators around the world are finally catching up with the data broker industry, though enforcement remains uneven.

United States

California's CCPA and CPRA give residents the right to know what personal information is collected, to request deletion, and to opt out of sales. California also maintains a public registry of data brokers that must register annually. Vermont, Texas, Oregon, and several other states have passed similar laws. A proposed federal privacy framework has gained momentum but has not yet become law.

European Union and United Kingdom

The GDPR and UK GDPR provide some of the strongest protections globally. Individuals have the right to access, correct, delete, and port their data, and brokers must demonstrate a lawful basis for processing. Enforcement actions against brokers have resulted in multi-million euro fines.

Other Regions

Brazil (LGPD), Canada (PIPEDA, with reforms in progress), Australia (Privacy Act review), Japan (APPI), and South Korea (PIPA) all offer varying levels of consumer rights. Residents of these regions should check their national data protection authority for official opt-out and complaint procedures.

Pros and Cons of the Data Broker Industry

Pros (from industry's perspective)

Enables personalized advertising that can lower costs for free online services.
Supports fraud prevention and identity verification across financial services.
Helps non-profits and researchers identify audiences and trends.
Powers emergency contact tracing and public health analytics.

Cons (for consumers)

Operates largely without consent or transparency.
Creates massive honeypots of personal data vulnerable to breach.
Enables discrimination, stalking, and manipulation.
Shifts economic value from individuals to intermediaries.
Opt-out processes are intentionally friction-heavy.

The Future of Personal Data

Three trends will shape the data broker industry over the next few years. First, regulatory pressure is increasing, with the US Federal Trade Commission and state attorneys general taking more aggressive action against brokers that sell sensitive data such as precise location, health, and reproductive information. Second, browser-level changes — the death of third-party cookies, Apple's App Tracking Transparency, and stricter mobile OS restrictions — are forcing brokers to pivot toward first-party data partnerships and server-side tracking. Third, AI is both a threat and an opportunity: generative models can infer sensitive attributes from innocuous data points, but they can also power better consumer tools for detecting and removing personal information online.

The bottom line is that the data broker economy is not going away, but informed consumers who take even modest protective steps can meaningfully reduce their exposure.

Frequently Asked Questions

Is it legal for data brokers to sell my personal information?

In most jurisdictions, yes — provided brokers comply with applicable privacy laws such as the CCPA, GDPR, or LGPD. However, selling certain categories of sensitive data (health, biometric, children's data, precise location) is increasingly restricted, and consumers in many regions have the legal right to opt out.

How do I find out what data brokers have on me?

You can submit data access requests under laws like the GDPR or CCPA to specific brokers. Services like Optery and DeleteMe will scan hundreds of broker sites and show you where your profile appears. In California, the official data broker registry lists every broker required to register with the state.

Does opting out really work?

Yes, but with caveats. Opting out removes your profile from a specific broker's database, often for 1–2 years. Because new data flows in constantly, your profile can be rebuilt over time. Treat opt-outs as ongoing maintenance rather than a one-time fix, and consider automation tools if you want sustained protection.

Are free people search sites really free?

The basic preview is free, but detailed reports usually require payment. More importantly, these sites make money by selling leads and premium subscriptions, and your profile is the inventory. Opting out removes you from the public listing even if you never paid them a cent.

Can I sue data brokers for violating my privacy?

In some jurisdictions, yes. The CCPA provides a private right of action for certain breaches, and the GDPR allows individuals to seek compensation for violations. Class action lawsuits against major brokers have resulted in substantial settlements. Consulting a privacy attorney in your region is the best starting point if you believe your rights have been violated.