Data Brokers: Who Is Selling Your Personal Information in 2026

Every time you browse a website, download an app, sign up for a loyalty card, or even register to vote, someone is quietly collecting information about you. Much of that data doesn't just stay with the company you shared it with — it flows into a vast, largely invisible industry known as the data broker ecosystem. These companies compile, package, and sell detailed profiles of billions of people worldwide, often without their knowledge or meaningful consent.

In this guide, we'll pull back the curtain on data brokers selling personal information, explain how the industry works, name some of the largest players, and show you concrete steps you can take to reclaim control of your data.

What Are Data Brokers?

Data brokers are companies that collect personal information about consumers from a wide range of public and private sources, aggregate it into detailed profiles, and sell or license that data to third parties. Buyers include advertisers, insurance companies, lenders, political campaigns, employers, law enforcement, and other data brokers.

Unlike companies you directly interact with, you've likely never heard of most data brokers. They operate in the background, buying and selling your information through automated systems and private marketplaces. The U.S. Federal Trade Commission has estimated that the data broker industry generates more than $200 billion annually, with some single brokers holding profiles on more than 500 million consumers worldwide.

Types of Data Brokers

Not all data brokers do the same thing. The industry is typically divided into three broad categories:

• Marketing and advertising brokers — Collect demographic, behavioral, and purchase data to help advertisers target consumers.
• Risk mitigation brokers — Sell information used for fraud detection, identity verification, and background checks.
• People search sites — Public-facing websites that let anyone look up names, addresses, phone numbers, relatives, and more for a small fee.

How Data Brokers Collect Your Personal Information

Data brokers assemble their massive profiles from thousands of sources, blending public records with commercial and online data. Understanding where this information comes from is the first step to limiting what they can gather.

Common Data Sources

1. Public records — Property deeds, court filings, marriage and divorce records, voter registration, business licenses, and bankruptcies.
2. Commercial transactions — Loyalty card programs, warranty registrations, magazine subscriptions, and retail purchase histories.
3. Online tracking — Cookies, pixels, device fingerprinting, and tracking scripts embedded across millions of websites and apps.
4. Mobile apps — Location data, contacts, device identifiers, and in-app behavior sold by app developers to monetize free products.
5. Social media — Public profiles, posts, likes, friends lists, and engagement data scraped or purchased in bulk.
6. Data breaches and leaks — Information from exposed databases that circulates through gray and black markets.
7. Other brokers — Brokers routinely buy and sell data to each other, enriching their profiles with pieces purchased from competitors.

What's Actually in Your Profile?

The depth of information held by a single large broker can be startling. A typical profile may contain:

• Full name, aliases, and former names
• Current and past addresses, often going back decades
• Phone numbers, email addresses, and social media handles
• Date of birth, gender, and ethnicity
• Household composition, including names of relatives and roommates
• Income range, net worth estimates, and credit indicators
• Education, occupation, and employer
• Religious and political affiliations
• Health conditions inferred from purchases or searches
• Hobbies, interests, and lifestyle categories ("outdoor enthusiast," "new parent," "frequent traveler")
• Device IDs, IP addresses, and browser fingerprints

The Biggest Data Brokers You've Probably Never Heard Of

While hundreds of companies operate in this space, a handful of giants dominate the market. Here are some of the most influential data brokers worldwide:

Broker	Headquarters	Primary Focus	Approximate Reach
Acxiom (LiveRamp)	USA	Marketing data, identity resolution	2.5+ billion consumers
Experian	Ireland/USA	Credit, marketing, risk data	1+ billion consumers
Equifax	USA	Credit reporting, workforce data	820+ million consumers
TransUnion	USA	Credit, fraud prevention	1+ billion consumers
Oracle Data Cloud	USA	Advertising audience data	Billions of device IDs
CoreLogic	USA	Property and financial data	99% of U.S. properties
Spokeo / BeenVerified / Whitepages	USA	People search sites	Hundreds of millions
Nielsen	USA	Media and consumer behavior	Global

Who Buys Your Data — and Why

The buyers of broker data are nearly as diverse as the sources. Understanding who benefits from your information helps clarify why the industry has grown so large and so entrenched.

Common Buyers of Personal Data

• Advertisers and marketers use detailed profiles to serve targeted ads across websites, apps, connected TVs, and even direct mail.
• Insurance companies may use lifestyle and behavioral data to adjust premiums or decide who to market policies to.
• Lenders and financial institutions buy risk data for credit decisions and fraud screening.
• Employers and background check firms purchase profiles for pre-employment screening.
• Political campaigns target voters based on inferred ideology, turnout likelihood, and issue preferences.
• Government agencies and law enforcement buy commercial data to sidestep legal processes that would otherwise require a warrant.
• Private investigators and debt collectors use people search sites to locate individuals.
• Scammers and fraudsters exploit easily purchased data for phishing, SIM swapping, and identity theft.

Why This Industry Is a Privacy Problem

The data broker ecosystem creates risks that go far beyond annoying targeted ads. When detailed dossiers on nearly every adult are available to anyone willing to pay, the consequences can be serious.

Real-World Harms

1. Stalking and harassment — People search sites have been used repeatedly to locate victims of domestic abuse, journalists, and public officials.
2. Discrimination — Audience segments like "financially struggling seniors" or specific health condition lists have enabled predatory targeting.
3. Identity theft — Combinations of name, date of birth, address history, and relatives make it easier for criminals to answer security questions and open fraudulent accounts.
4. Government surveillance — Agencies that face legal limits on direct data collection can simply purchase the same information from brokers.
5. Breach exposure — When a broker is hacked, as happened in the 2024 National Public Data breach that exposed Social Security numbers of hundreds of millions, the scale is enormous.
6. Price discrimination — Retailers and service providers can show different prices to different consumers based on inferred ability to pay.

Laws and Regulations: What Protects You?

Legal protections against data brokers vary dramatically by region. In some places you have strong rights; in others, almost none.

Global Regulatory Landscape

Region	Key Law	Key Rights
European Union / UK	GDPR / UK GDPR	Access, deletion, portability, consent requirements
California, USA	CCPA / CPRA	Right to know, delete, opt out of sale, correct
Other U.S. states	Varies (CO, VA, CT, TX, etc.)	Similar opt-out and deletion rights, expanding
Canada	PIPEDA	Consent, access, correction
Brazil	LGPD	Similar to GDPR
Australia	Privacy Act	Access, correction; reforms underway

Several U.S. states, including California, Vermont, Texas, and Oregon, now require data brokers to register publicly. California's Delete Act, which takes full effect in 2026, will eventually allow consumers to submit a single deletion request that applies to every registered broker — a significant step forward.

How to Remove Your Information From Data Brokers

Opting out is time-consuming but genuinely effective. Each broker has its own process, and new profiles will be rebuilt over time if you don't maintain good privacy hygiene. Here's a practical approach.

Step-by-Step Opt-Out Process

1. Start with people search sites. These are the most immediate privacy risk because anyone can look you up. Prioritize Spokeo, BeenVerified, Whitepages, Intelius, MyLife, Radaris, and PeopleFinders.
2. Find each broker's opt-out page. Most are buried in footers or privacy policies. Search "[broker name] opt out" to find the correct URL.
3. Submit removal requests. You'll typically need to confirm your identity via email or, frustratingly, by uploading an ID. Use a dedicated email address for this.
4. Opt out of major marketing brokers. Acxiom, Oracle, Epsilon, and LiveRamp all offer consumer opt-out portals.
5. Use industry-wide opt-outs. The DAA's YourAdChoices and the NAI opt-out page cover many advertising brokers at once.
6. Submit CCPA / GDPR deletion requests if you live in a covered region — even against brokers outside your country, as many comply globally.
7. Repeat every 6-12 months. Profiles reappear as brokers refresh their data.

Paid Removal Services

If the manual process sounds overwhelming, services like DeleteMe, Kanary, Optery, and Incogni will submit removal requests on your behalf for an annual fee (typically $80-$180). They don't achieve 100% removal — no service can — but they handle hundreds of brokers automatically and resubmit regularly.

How to Reduce the Data Brokers Can Collect in the Future

Deletion is only half the battle. Reducing the flow of new information is just as important.

Practical Privacy Habits

• Use a privacy-focused browser like Firefox, Brave, or Safari with strict tracking protection enabled.
• Install a reputable content blocker such as uBlock Origin to stop third-party trackers.
• Enable encrypted DNS (DNS-over-HTTPS or DNS-over-TLS) to prevent your network provider from logging and selling your browsing destinations.
• Use email aliases from services like SimpleLogin, Firefox Relay, or Apple's Hide My Email so companies can't easily link your accounts across services.
• Avoid loyalty programs or sign up with minimal information and a dedicated email.
• Review app permissions regularly, especially location, contacts, and advertising ID access.
• Opt out of pre-approved credit offers through OptOutPrescreen.com in the U.S.
• Freeze your credit with the major bureaus — it blocks new accounts and limits data sharing.
• Use privacy-respecting link sharing tools. When sharing URLs publicly, a shortener that doesn't resell click data — like Lunyb — is a smarter choice than one that monetizes tracking. You can read our honest review of Lunyb or compare options in our 2026 URL shortener buyer's guide.

What the Future Holds for Data Brokers

The industry faces growing pressure from several directions. Regulators in the U.S., EU, and beyond are expanding consumer rights. Browsers are phasing out third-party cookies and tightening fingerprinting defenses. Operating systems are giving users more control over cross-app tracking. And public awareness is rising, driven by high-profile breaches and investigative journalism.

At the same time, brokers are adapting. They're shifting toward first-party data partnerships, probabilistic matching, and so-called "clean rooms" that let companies combine datasets without technically sharing raw records. The underlying surveillance economy is not disappearing — it's evolving. That means individual action, informed choices, and continued regulatory pressure all matter.

Frequently Asked Questions

Is it legal for data brokers to sell my personal information?

In most countries, yes — with limits. In the EU, UK, Brazil, and a growing list of U.S. states, brokers must comply with consent, disclosure, and deletion requirements. In much of the world, however, selling commercially gathered personal data remains legal as long as it isn't obtained through fraud or in violation of specific sectoral laws (like health or financial regulations).

How do data brokers get my information if I'm careful online?

Public records alone — property deeds, voter rolls, court filings, business registrations — provide a surprising amount of baseline information. Add in data from any store loyalty card, warranty registration, or app you've ever used, plus data purchased from other brokers, and a detailed profile can be built without you ever filling out a broker's form directly.

Will opting out of data brokers actually work?

Opting out works for the specific brokers you contact, and it meaningfully reduces your exposure on people search sites. However, new profiles can reappear as brokers refresh data from public records and partners. Treat opt-outs as ongoing maintenance, not a one-time fix. California's Delete Act and similar laws should make this easier over time.

Can I sue a data broker for selling my information?

In some jurisdictions, yes. GDPR allows individuals to seek compensation for violations, and class actions have been filed under CCPA, Illinois' BIPA (for biometric data), and various breach notification laws. Successful individual lawsuits are rare, but regulatory complaints to agencies like the FTC, your state attorney general, or your national data protection authority can trigger investigations.

Are free people search sites as dangerous as paid broker databases?

Arguably more dangerous for everyday privacy. Free and low-cost people search sites make detailed personal information — addresses, phone numbers, relatives, age — available to anyone with a web browser, including stalkers, scammers, and harassers. Enterprise broker databases cost more and are usually accessed by businesses, while people search sites democratize the harm. Prioritize removing yourself from these first.