What Is a Data Broker and Why It Matters

What Is a Data Broker and Why Should You Care

Acxiom, one of the largest companies in this space, maintains profiles on more than 300 million Americans, each containing over 10,000 individual data points. That single fact tells you what a data broker actually is more clearly than any dictionary definition: a company whose entire business is collecting, packaging, and reselling detailed personal profiles to anyone willing to pay for them, usually without the person profiled ever being asked.

An Industry Worth More Than You’d Guess

The global data broker market was valued at roughly $287 billion in 2025, with projections placing it between $464 and $616 billion by 2032. For scale, that’s larger than the entire global recorded music industry, and most people have never heard the term “data broker” at all. Consumer coverage tends to describe this vaguely as “hundreds of billions,” which undersells how enormous and structurally embedded this industry already is in ordinary commerce.

What’s Actually in a Profile

A single data broker profile commonly includes far more than name and address. Beyond basic contact details, profiles compile income estimates, occupation, purchase history, social media activity, property records, and increasingly, inferred behavioral categories, labels like “expectant parent” or “frequent traveler” generated from patterns in your data rather than anything you directly stated. Acxiom’s figure of over 10,000 attributes per person means a data broker’s file on you is, in a very literal sense, more detailed than most people’s own mental picture of their own habits.

Health data brokers occupy a specific and less-discussed corner of this industry. IQVIA, a major player in this category, collects patient records, prescription histories, and health behavior data, which gets used for pharmaceutical and medical marketing purposes. Location data brokers, including Cuebiq and SafeGraph, separately track GPS and app-based location signals to build movement and demographic models sold to retailers and, in some cases, government agencies.

How They Get Your Data Without You Ever Agreeing

Public records, voter registration files, property records, and court filings, form one major source, and these are legally accessible regardless of anything you personally consent to. Online tracking through cookies and embedded trackers, covered in more depth in what information do websites get when you visit them, feeds a second stream. Retailers and loyalty programs sell purchase history directly. And critically, data brokers buy and sell data from each other, meaning your profile at one company can originate entirely from a transaction you had no part in and no visibility into. This is the same underlying pipeline covered in how do apps know your age, gender, and interests, where app-level inference feeds directly into this broader broker ecosystem.

The Financial Harm Goes Beyond Creepy Ads

Most consumer explanations frame data brokers as an annoyance, the source of unsettlingly specific ad targeting. The more serious cost is financial. Data broker breaches have cost U.S. consumers more than $20 billion through identity theft alone, a figure that reflects how much sensitive, aggregated personal data these companies are sitting on, and how frequently that data ends up exposed. People-search sites, run by brokers like Spokeo and Whitepages, make detailed personal profiles accessible to essentially anyone with a browser, including people with harmful intent, not just marketers.

Why This Industry Operates Legally

The United States has no comprehensive federal privacy law governing data brokers as a category, which leaves the industry operating in a genuine legal grey area rather than under a unified regulatory framework. California’s Consumer Privacy Act, or CCPA, requires broker registration and grants residents opt-out rights, but enforcement is inconsistent, and hundreds of brokers have simply declined to register with state agencies despite legal requirements to do so. A proposed federal DELETE Act would extend a nationwide right to delete personal data held by brokers, a significant potential shift, but as of now it remains proposed legislation rather than enacted law.

Even Children Are Profiled

Data collection through apps, games, and social media doesn’t reliably stop at age verification, and data brokers have been shown to hold profiles on minors, built the same way adult profiles are: through app permissions, embedded SDKs, and behavioral tracking, largely without meaningful parental consent built into the process. This connects directly to the concerns raised in why do some apps ask for your microphone when they don’t need it, since the same collection mechanisms apply regardless of the user’s age.

The Cambridge Analytica Connection

The Cambridge Analytica scandal, where harvested user data was used to build psychological profiles for political targeting, is frequently treated as an isolated controversy. It’s more accurate to see it as a visible instance of the data broker industry’s standard operating model: aggregate detailed personal data, build predictive profiles, sell access to whoever wants to influence behavior, whether that’s a retailer or a political campaign.

Trying to Opt Out

A manual opt-out means contacting each broker individually and requesting removal, a process that has to be repeated separately for potentially hundreds of companies, since there’s no single master switch. California’s DROP platform, the Delete Request and Opt-out Platform, lets residents submit one deletion request that reaches all state-registered brokers simultaneously, a meaningful improvement, though it only covers brokers that have actually registered. The honest limitation here: a significant fraction of brokers don’t respond to opt-out requests at all, and some demand identity verification steps that privacy laws like CCPA explicitly prohibit them from requiring. The system was not designed to make removal easy.

FAQs