Data Broker
O que é Data Broker?
Data BrokerA business that aggregates personal data about consumers from public, commercial, and observed sources and sells it onward — increasingly regulated under California's Delete Act, U.S. state data-broker registries, EU privacy law, and CFPB Section 1033 rules.
A data broker is a business whose primary activity is the collection, aggregation, and resale of personal information about consumers with whom it has no direct relationship. Inputs include public records (court filings, voter rolls, property), commercial sources (loyalty programs, retailers, telcos, ISPs), observed online behavior (advertising IDs, location SDKs), and people-search scrapes. Outputs range from people-finder sites to enterprise marketing, debt-collection, risk-scoring, and increasingly to private intelligence and national-security buyers. Regulation has accelerated. California's SB 362 (Delete Act, 2023) requires data brokers to register and to honour deletion requests via a single central interface starting in 2026. Vermont, Texas, Oregon, and other U.S. states maintain registries. The EU GDPR treats brokers as 'controllers' subject to data-subject rights and Article 14 information obligations even when data is collected indirectly. The U.S. CFPB has pursued data brokers under FCRA, and federal proposals continue to address bulk data sales to foreign adversaries. For privacy programs, data brokers are an underestimated source of PII and a documented vector for executive-protection and physical-safety risks.
● Exemplos
- 01
An executive-protection team submits deletion requests to dozens of U.S. people-search data brokers via the upcoming California Delete Act central registry to suppress home-address exposure.
- 02
A privacy review of a free mobile app finds that a third-party SDK silently sells precise GPS coordinates to a location-data broker.
● Perguntas frequentes
O que é Data Broker?
A business that aggregates personal data about consumers from public, commercial, and observed sources and sells it onward — increasingly regulated under California's Delete Act, U.S. state data-broker registries, EU privacy law, and CFPB Section 1033 rules. Pertence à categoria Privacidade e proteção de dados da cibersegurança.
O que significa Data Broker?
A business that aggregates personal data about consumers from public, commercial, and observed sources and sells it onward — increasingly regulated under California's Delete Act, U.S. state data-broker registries, EU privacy law, and CFPB Section 1033 rules.
Como funciona Data Broker?
A data broker is a business whose primary activity is the collection, aggregation, and resale of personal information about consumers with whom it has no direct relationship. Inputs include public records (court filings, voter rolls, property), commercial sources (loyalty programs, retailers, telcos, ISPs), observed online behavior (advertising IDs, location SDKs), and people-search scrapes. Outputs range from people-finder sites to enterprise marketing, debt-collection, risk-scoring, and increasingly to private intelligence and national-security buyers. Regulation has accelerated. California's SB 362 (Delete Act, 2023) requires data brokers to register and to honour deletion requests via a single central interface starting in 2026. Vermont, Texas, Oregon, and other U.S. states maintain registries. The EU GDPR treats brokers as 'controllers' subject to data-subject rights and Article 14 information obligations even when data is collected indirectly. The U.S. CFPB has pursued data brokers under FCRA, and federal proposals continue to address bulk data sales to foreign adversaries. For privacy programs, data brokers are an underestimated source of PII and a documented vector for executive-protection and physical-safety risks.
Como se defender contra Data Broker?
As defesas contra Data Broker costumam combinar controles técnicos e práticas operacionais, conforme detalhado na definição acima.
Quais são outros nomes para Data Broker?
Nomes alternativos comuns: Information broker, People-search broker.
● Termos relacionados
- privacy№ 914
Informações de Identificação Pessoal (PII)
Qualquer dado que permita identificar uma pessoa específica, isoladamente ou em conjunto com outras informações, como nomes, identificadores ou registos biométricos.
- privacy№ 306
Classificação de dados
Processo de rotular os dados pela sua sensibilidade e valor, para aplicar de forma consistente os controlos de proteção, manuseamento e retenção adequados.
- privacy№ 315
Retenção de dados
Políticas e controlos que definem durante quanto tempo as várias categorias de dados são conservadas e quando são apagadas, arquivadas ou anonimizadas de forma segura.
- privacy№ 1039
Direito ao esquecimento
Direito de uma pessoa obter o apagamento dos seus dados pessoais quando não exista motivo legal preponderante para continuar a tratá-los, ao abrigo do artigo 17.º do RGPD.
- compliance№ 488
RGPD
Regulamento Geral sobre a Proteção de Dados da União Europeia, que regula o tratamento de dados pessoais de pessoas na UE e no EEE.
- compliance№ 167
CCPA
California Consumer Privacy Act, lei estadual dos EUA que concede aos residentes da Califórnia direitos sobre as suas informações pessoais detidas por empresas.