What is a data broker, actually?

The one-sentence version

A data broker is a company that collects your personal information and sells it. Not to one buyer. To anyone who pays — a stranger, a marketer, a skip tracer, sometimes a defendant you arrested.

No law makes them ask your permission first. That's not a loophole. It's just how the rules were written.

Where they actually get your data

Three sources, and none of them require you to sign up for anything.

Public records. Every time you register to vote, buy a house, get divorced, or show up in a court filing, a government agency publishes it. That's the law — records stay open so the public can watch what government does. Brokers built businesses around scraping those records the day they post and repackaging them under your name.

Purchased consumer data. Loyalty cards, warranty registrations, magazine subscriptions, app permissions you clicked through without reading. Companies collect this stuff to run their own business, then sell the leftover data as a side income. A broker buys it in bulk, matches it to your name and address, and adds it to your file.

Other brokers. This is the part most people miss. Brokers sell to each other. Broker A buys a feed from Broker B, mixes it with data from Broker C, and resells the combined file under a new name. Scrub yourself off one site and three others still have you, because they never got the update — they got a stale copy months ago and never asked again.

Why this is legal

Here's the plain version: the U.S. doesn't have one federal law that says "you can't buy and sell someone's personal information." Europe has something like that. We don't.

What we have instead is a patchwork — a law here that protects your driver's license record (DPPA), a law there that protects specific groups like judges or NJ officers (Daniel's Law, the Lieu Act), and nothing at all covering most everyone else in most states.

So a broker builds a business entirely inside the gap. Public records are legally public. Consumer data changes hands legally too, under terms nobody reads. Combine both, and you've got a legal business built on information you never agreed to share. Nothing about it is hidden or illegal. That's exactly why it's so hard to stop.

People-search sites vs. the brokers you never see

"Data broker" covers two very different businesses, and knowing the difference matters.

People-search sites are the ones you can find yourself: Spokeo, Whitepages, TruePeopleSearch. They have a website. You type in a name, a free preview shows up, and a few dollars unlocks the full report — address, relatives, phone number. Anyone can use them. That's the point. They're built for a stranger with a browser and a credit card.

B2B data brokers don't have a public search page at all. Names like Acxiom, LexisNexis Risk Solutions, and TransUnion TLOxp sell in bulk, to businesses — insurers, lenders, background-check companies, sometimes the people-search sites themselves. You can't Google your name on their site because there is no consumer-facing site. You have to know they exist to even ask them to remove your data.

Both tiers matter. The people-search sites are the loud, obvious exposure — the one a random person finds in thirty seconds. The B2B tier is quieter but feeds the whole ecosystem underneath it. Miss one and the other still has your file.

Why this matters for your family

Brokers don't stop at your name. Search yourself and the results usually include your spouse, your parents, sometimes your kids — because the data is built around households, not individuals. Someone who can't find you directly can often find you through them.

That's the real risk. Not an ad following you around online. Someone showing up at your door because a website handed them your address for nine dollars.

What to do about it

You can't opt out of a company you've never heard of. That's the whole problem with the B2B tier — most officers only know the five or six people-search sites that show up in a Google search.

Run a free scan and we'll show you which brokers — consumer and B2B — currently have your information. Then we file the removals and keep checking, because brokers re-list you and resell your file to each other whether you asked them to or not.