Privacy and Data Protection

What Data Brokers Are and Why They Matter

Learn how data brokers gather and resell personal information, why it affects ordinary people, and the general options for limiting your exposure.

On this page
  1. Who data brokers are
  2. Where the data comes from
  3. How the data is used
  4. Why it matters
  5. What you can do
  6. Keeping expectations realistic

Who data brokers are

Data brokers are companies that collect personal information from many sources, combine it into profiles, and sell or license it to others. You usually have no direct relationship with them. They are not a single industry with a standard definition, and the term covers a range of businesses, from marketing list providers to firms that run people-search websites to companies that supply data for screening and verification.

Because they operate behind the scenes, many people only discover them when they find their own address and relatives listed on a public lookup site.

Where the data comes from

Brokers typically assemble profiles from several kinds of sources, though the exact mix varies by company:

  • Public records. Property records, court documents, voter files (in some places) and business registrations are public in many jurisdictions.
  • Commercial sources. Purchase histories, loyalty programs, warranty cards, surveys and sweepstakes entries can be shared or sold, depending on what the original company’s terms allow.
  • Online activity. Information collected through tracking cookies, apps and advertising tools may reach brokers directly or through ad networks.
  • Other brokers. Data is frequently resold and merged, so a single record can pass through many hands.
  • Inference. Brokers estimate things such as likely income range, interests or household type. These guesses can be wrong.

A single fact, like a postal address, may seem trivial. Combined with a name, age range, relatives, past addresses and purchase patterns, it becomes a profile that can be sold repeatedly.

How the data is used

Common uses include:

  • Marketing and advertising. Targeting offers by interest, location or life stage, and building customer segments.
  • People search. Websites that let anyone look up a name and see addresses, phone numbers and relatives.
  • Identity and fraud checks. Companies verify who you are or assess risk. Used well, this can help prevent fraud.
  • Background screening and risk scoring. Some data feeds into decisions about employment, housing or credit. In some countries, regulated rules apply when this data is used for those decisions, including rights to see and dispute errors.

Why it matters

  • Safety. Easily searchable addresses and phone numbers can help stalkers, harassers and people who want to track someone down.
  • Scams. Detailed profiles help scammers craft convincing messages, since knowing your relatives’ names or former addresses makes a phone or text approach more believable. Thus, broker data can feed online scams, impersonation scams and identity theft.
  • Errors. Profiles can be outdated or mix up people with similar names, and inaccurate data can have consequences when it is used for screening.
  • Lack of visibility. It is hard to know who holds your data or how widely it has spread.
  • Security. Large stores of data are attractive targets, and data breaches at a broker can expose information about people who never dealt with it.

What you can do

You cannot erase yourself from this industry entirely, and removal is usually ongoing rather than one-off. Practical options include:

  1. Reduce what flows in. Share only required details on forms, use a separate email address and phone number for sign-ups, and decline optional marketing. Review app permissions and limit ad personalization.
  2. Find your listings. Search your name, address and phone number, including on people-search sites, as part of a regular digital footprint review.
  3. Use opt-out processes. Many people-search sites have an opt-out form. Expect to verify your identity, possibly provide an email address, and repeat the process with each site. Listings sometimes reappear.
  4. Use legal rights where available. Some laws let you ask a business what it holds, request deletion and opt out of the sale or sharing of data. Some regions also have central registries or simplified tools for these requests. What applies depends on where you live, and the general overview of data privacy laws gives some context.
  5. Consider paid removal services carefully. Some companies offer to submit opt-outs for you. They save time but cost money, cannot promise complete removal, and they require handing over personal details, so research them first and read their terms.
  6. Opt out of marketing lists. Mail, phone and email preference services exist in some countries, and they cut down on unsolicited offers.
  7. Be careful with public records. Where possible, check whether you can limit what appears in public registries, such as using a business address rather than a home address.
  8. Protect against misuse. A password manager, two-factor authentication and caution toward unexpected calls and messages reduce the harm if your details are out there. People at higher risk may want to look at additional steps with a trusted advisor.

Keeping expectations realistic

Results are partial. New data keeps flowing in, brokers number in the hundreds or more, and opt-outs are inconsistent. The sensible aim is to shrink and monitor your exposure, not to reach zero. A routine of limiting new data and checking the largest or most visible sites every few months tends to give the best return on effort.

The complete guide to privacy and data protection

Online Privacy Explained for Everyday Users
Read the guide

Keep exploring

Guides from other topics

All topics →