Is Data Broker Compliance Slipping Through the Cracks?
Most people first discover data broker compliance only after their personal details appear on a “people-finder” site. A data broker is any company that collects, packages, and sells personal information—names, addresses, purchase habits, even Social Security numbers. Four U S. states (California, Texas, Oregon, and Vermont) require these firms to register and explain what data they hold, yet a fresh Electronic Frontier Foundation (EFF) and Privacy Rights Clearinghouse (PRC) audit shows hundreds of brokers missing from one or more state databases. If you’re searching “Are data brokers legal?” or “How can I opt out of data collection?” this overview delivers quick, actionable answers while spotlighting the widening compliance gap in 2025.
How Four States Define Data Broker Compliance
Under California’s Consumer Privacy Act, any company that trades data for value must register annually and provide clear opt-out links. Texas, Oregon, and Vermont impose similar but slightly different rules—Texas adds cybersecurity mandates, while Vermont demands disclosure of data sources. The EFF/PRC scrape found 524 brokers registered in Texas but not in California, and 291 registered in California but absent elsewhere. Variations in each statute’s wording partly explain the mismatch, yet regulators fear some firms simply ignore registration laws to reduce fees and scrutiny. Inconsistent listings make it harder for consumers—and watchdogs—to track who holds their data.
What Missing Registrations Mean for Your Privacy
When brokers skip required filings, you lose visibility into what’s collected, how it’s shared, and how to remove yourself. Even “reputable” giants like LexisNexis Risk Solutions have suffered breaches exposing hundreds of thousands of records, proving that unregistered brokers pose an even bigger risk. Lack of transparency also undermines E-E-A-T signals: consumers can’t judge a broker’s expertise or trustworthiness if the company hides from public oversight. State attorneys general can levy fines or bar non-compliant brokers from selling data inside state lines, but enforcement remains spotty without public pressure.
Steps You Can Take to Encourage Data Broker Compliance
First, check your state’s data-broker registry and submit opt-out requests where available. Next, file complaints with your attorney general if a broker isn’t listed or ignores opt-outs. Use privacy tools like browser trackers and credit freezes, and advocate for broader federal rules to close the compliance loophole across state borders. Finally, support digital-rights nonprofits (EFF, PRC) that litigate and lobby for stronger penalties. The more consumers demand accountability, the faster legislators and regulators will tighten the net around non-compliant data brokers—and the safer everyone’s personal information will be.
Comment