What a data broker is
A data broker is a company whose business is collecting information about people, organising it and selling or licensing it to others. Most people have never dealt with one directly. They are not the websites you sign up to; they sit behind the scenes, buying from and selling to other businesses.
Brokers vary in size and purpose. Some specialise in marketing lists. Others offer people-search websites, fraud-checking tools, or background data for employers and landlords. The rules covering them depend heavily on the country, and in some places they must register or respond to deletion requests, while in others there are few obligations.
Where the raw material comes from
No single source gives a broker a full picture. The profile comes from stitching together many partial ones.
Public records. Depending on the location, these can include property ownership, court filings, business registrations, professional licences and voter or electoral information. Records are public for legitimate reasons, but gathered in bulk they become a searchable index of people.
Commercial sources. Retailers, loyalty programmes, magazine subscriptions, warranty cards and surveys sometimes share or sell customer lists. Whether yours is shared depends on what you agreed to when you signed up, which is why the terms are worth skimming; the guide to privacy policies describes the wording to look for.
Online activity. Websites and apps may include tracking code from advertising partners, so that visits and interests flow into advertising profiles. This is explained in the pieces on tracking cookies and targeted advertising.
Apps and devices. Some apps pass along device identifiers or location data to partners, which can be bought and sold in bulk. This is one reason reviewing location tracking and app permissions is worthwhile.
Social media. Information you make public may be gathered by automated tools, subject to each platform’s rules, which vary.
Other brokers. A large share of data is simply traded between data companies, which makes any single record hard to trace to its origin.
How scattered records become a profile
Collection is only half of it. The value comes from linking records so that they refer to the same person.
- Matching. Brokers try to recognise that “J. Smith at 12 Elm Street” in a property record and “John Smith” in a magazine list are the same individual. They use names, addresses, phone numbers, email addresses and device identifiers as keys. Matching is imperfect, so mistakes happen, and profiles sometimes mix up people with similar names or merge relatives.
- Enrichment. Each new match adds fields: age range, household size, purchases, interests and so on.
- Inference. Models estimate things the broker does not directly know, such as likely income band, hobbies or life stage. These are guesses, and may be wrong.
- Segmentation. Profiles are grouped into categories, for example “new parents” or “frequent travellers”, that buyers can target.
A profile therefore mixes facts, guesses and outdated entries. It may be less accurate than it looks, but it is still used in practice.
Who buys it and for what
Typical buyers include:
- Marketers who want lists of likely customers or to match their own customer records with outside data.
- Fraud and identity verification services checking that a person is who they claim to be.
- People-search websites that let anyone look up addresses, relatives and phone numbers, often for a fee.
- Businesses doing background or risk checks, which in many countries are subject to specific laws about accuracy and permitted use.
- Political and charitable campaigns building contact lists.
Data may be sold outright, licensed for a period, or supplied through an advertising platform without the buyer ever seeing the underlying records.
Why this can cause problems
- Unwanted contact. Junk mail, nuisance calls and targeted offers can all trace back to purchased lists.
- Scam material. Detailed personal information helps fraudsters craft convincing phishing emails and phone scams.
- Safety. People-search sites can expose home addresses, which is a particular concern for people who have faced harassment or stalking.
- Errors. Wrong information can follow you between datasets and is hard to correct when you do not know who holds it.
- Leaks. Brokers are large collections of personal data, and so attractive targets for attackers. The article on data breaches explains what happens when a database leaks.
What you can do
You cannot prevent all of this, but you can reduce it.
- Use opt-out tools where they exist. Many people-search sites have an opt-out form, often hidden in the footer. Expect to repeat this, because data tends to reappear. Some paid services will file requests for you; consider whether the cost is worth it and check how a service handles your information before handing over more.
- Exercise legal rights. In some regions you can ask a company what it holds, ask for deletion, or object to its sale. Check your national or regional regulator for the rules that apply to you.
- Share less at sign-up. Leave optional fields blank, and use a separate email address or alias for shops and newsletters.
- Check app and browser settings. Limit location sharing, turn off ad personalisation where offered, and block third-party cookies.
- Be careful with surveys, prize draws and warranty forms, which commonly feed marketing lists.
- Review your footprint. Searching your own name shows which people-search pages mention you, and the idea is expanded in the article on your digital footprint.
Opt-outs are rarely permanent or complete. Treat them as ongoing maintenance, done a few times a year, rather than a one-time fix.