Your personal data sits in roughly 4,000 databases you have never heard of. The exact number varies by privacy researcher and by country, but the order of magnitude holds. The data broker economy is the market that buys, packages, and resells that data. The market exists because the data exists, and the data exists because every app, every website, every loyalty program, every health portal, every credit application has been quietly trading your data for the better part of two decades. The market is mature. The market is global. The market has produced a handful of billion dollar companies (Acxiom, Experian, Epsilon, the data arms of the credit bureaus) and a long tail of smaller brokers who specialise in a vertical, a region, or a data type. The cost, to you, is not what you pay. The cost, to you, is what everyone else can do with what they have on you.
What the data broker economy actually looks like in 2026
Three categories of broker, in roughly that order of revenue. First comes the consumer data broker: Acxiom, Epsilon, Experian Marketing Services, the Oracle Data Cloud, the LiveRamp ramp. These brokers aggregate data from public records, loyalty programs, app SDKs, and the long tail of sources, then package it into segments (high income homeowners with children, frequent travellers, credit seeking millennials) and sell access to advertisers, political campaigns, and credit issuers. The revenue runs in the billions. The data sits, in aggregate, accurate enough to be useful and inaccurate enough to be defensible in court. Second comes the risk and fraud broker: the credit bureaus (Experian, Equifax, TransUnion), the fraud data aggregators, the device fingerprinting companies. These brokers sell identity verification, fraud scoring, and the kind of data that decides whether your credit application gets approved. The data carries more sensitivity, the regulations run tighter, the breaches land larger (Equifax 2017, the Experian/T Mobile incidents). Third comes the people search broker: Spokeo, Pipl, Whitepages, the smaller regional players. These brokers aggregate public records (voter registration, property records, court records, marriage and divorce records) and resell the lookups. The product looks free. The product earns monetisation through bulk access, through API integrations, and through the advertising layer that monetises the people who do not pay.
What the cost really is
Three categories of cost, and only one of them shows up in a price. First comes the financial cost: the credit decisions, the insurance premiums, the job application rejections that the data broker data influences. The financial cost runs real but diffuse. The person who gets denied credit because a data broker flagged them as high risk (often based on a data error, sometimes based on a data correlation that carries no causal basis) has no recourse and often no idea the data broker served as the cause. Second comes the privacy cost: the dossier on each of us, in aggregate, that the broker market has compiled, detailed enough to reconstruct significant parts of a person’s life from data they never knowingly shared. The privacy cost runs structural. Third comes the manipulation cost: the personalised advertising, the political microtargeting, the social engineering attacks that use the broker data to build a convincing pretext. The manipulation cost represents the one we are only starting to see, and the one that will run largest in the next decade.
What you can actually do about it
Three moves, in priority order. The first is opt out where you can. The major data brokers all have opt out pages. The CCPA in California, the GDPR in Europe, and the state level privacy laws in a growing number of US states give you the legal right to opt out and to request deletion. The opt out is not retroactive, and the broker will re collect your data within months, but the ongoing opt out cycle is a meaningful friction. The second move is to use the privacy preserving services where they exist. Apple Private Relay, DuckDuckGo, the privacy focused DNS providers, the burner email services. These do not stop the data collection, but they reduce the data fidelity. The third move is to support the legislative push. The American Privacy Rights Act and the EU ePrivacy Regulation have been working through the process in 2024 and 2025. The data broker economy will not shrink until the law makes it expensive to operate. The work is at the ballot box, not the opt out form.
The bottom line
Opt out, use privacy preserving services, support the legislation. The data broker economy is mature, global, and profitable. The cost to you shows up in credit decisions, insurance premiums, and manipulation attacks. The work is at the opt out form, the service choice, and the ballot box. None of it stops the broker market. All of it raises the cost of doing business.
Sources & Further Reading
All claims in this article are sourced from primary documentation, vendor advisories, and reputable security researchers.
Spotted an error? Email the editor. Corrections are issued with a visible correction note.
Editorial standards. Every article on humanrequired.org is reviewed by a human editor before publication. AI may assist with drafting or research; final editorial control is human. Read the full standards.
