Data broker ecosystems
29 briefingsA data broker ecosystem is the network of companies that build profiles of people they have no direct relationship with, then license that data to lenders, marketers, insurers, and one another. The records are assembled from public registers, commercial transactions, breach corpora, and behavioural signals — and the same person typically appears, in different shapes, across every layer at once.
It helps to read the ecosystem as four layers, because each answers to a different legal basis and each has a different removal ceiling:
- Credit and reference bureaus — Germany's Auskunfteien, the UK's credit reference agencies, US bureaus — operate on statutory bases that ordinary companies cannot invoke, which limits what erasure can reach.
- Address and marketing traders lean on the legitimate-interest basis, justified by an internal balancing test they are not required to publish — so a complaint often has no specific document to contest.
- People-search and aggregator sites, dominant in the US, compile public records into searchable profiles; opt-outs exist but are voluntary, temporary, and imperfect — records routinely re-appear.
- Adtech audience platforms infer income, health, and life-stage segments from device and behavioural signals — the layer least visible to the person it describes.
Removal is therefore not one task but four, with different mechanics in each jurisdiction. This hub maps the ecosystem country by country, explains the economics that make opt-outs deliberately hard, and sets out what a structured removal actually achieves — and where the DIY ceiling sits.
Legal bases referenced: GDPR Arts. 6(1)(f), 17, 21 · UK DPA 2018 · BDSG §§28a, 31 · CCPA/CPRA.
All briefings in this hub
Real-Time Bidding: The Segments You Cannot Delete
From 1 August 2026, one request can compel every registered data broker in California to delete you. Real-time bidding, the ad auction running on almost every page you load, is not a broker, holds no record and is not covered.
What Is PII? Personally Identifiable Information and Personal Data Under the GDPR
PII and personal data are not the same thing. The difference decides how much of you falls inside the definition.
France’s Data Economy: How Brokers Map Executives and the Wealthy
France’s data economy assembles executives and wealthy households into sellable profiles. This maps who holds which slice — from Nomination and Altares to consumer co-ops — why each is lawful, and why a US-style broker list misses most of it.
Search Result Removal Is Not Data Removal
Search engines can hide a result without deleting the source behind it, which is why durable removal starts at the source, not the search box.
The Security Case for Cleaning Up Your Digital Footprint
Footprint cleanup is not privacy theatre. It improves security when it removes the data attackers use to profile, impersonate, recover accounts, and build credible pretexts.
Is Your Telecom Operator a Data Broker? Running the Framework on Utiq
Four European telecoms operators built Utiq, an advertising identifier generated from your network connection. Put beside a cookie and run through the data-broker framework, it raises a sharper question than the marketing suggests.
How to Identify a Data Broker in the EU (When They Don't Call Themselves One)
European data brokers rarely call themselves data brokers, and no EU registry lists them. An EDPB market study offers a reusable framework to identify one by what it does.
Inside the Data Clean Room: How Your Profile Is Rebuilt Without Being Stored
Data clean rooms merge data about you, build a profile sharp enough to target you, then decline to store it. Here is the mechanism, and where the privacy claim breaks.
What Two LexisNexis Breaches Reveal About Trusting Data Brokers
LexisNexis was breached twice in fourteen months. What that reveals about trusting data brokers with data you never gave them.
How Your Digital Footprint Becomes Prices, Scores and Decisions
A single fact about you is worth a fraction of a cent. Refined by brokers, resolvers and scoring vendors, it decides your credit, insurance, rent and the price you pay.
How an Eraser Engagement Runs
A methodology walkthrough of the Eraser engagement — from the Mirror and Lockdown investigation foundation through active removal, verification, and the 90-day re-scrub.
Germany’s Data Economy: How Brokers Map Executives and Wealthy Households
Germany’s data economy maps executives and wealthy households through sales-intelligence firms, credit bureaux, address traders and adtech. This maps who holds which slice, the legal basis for each, and how to act on it.
Best Data Broker Removal Services in the US: What Actually Works (2026)
Six US data broker removal services tested against the August 2024 Consumer Reports field test — and why the free manual baseline outperformed every paid vendor in the cohort.
Why Data Brokers Make Opt-Outs Hard: The Economics of Friction
Broker opt-out URLs break for a structural reason: working opt-outs lower subscription revenue. The SEC-anchored math behind the friction.
How to Delete Your Personal Information from the Internet — The Practitioner’s Sequence
Removing your personal information from the internet is four problems, not one. Each layer has its own legal mechanic and its own DIY ceiling.
Data Brokers in the UK: Your Rights Under UK GDPR and the DUAA 2025
Who the UK's data brokers are, what the Data (Use and Access) Act 2025 changed, and why individual GDPR action now does what the ICO no longer can.
Do Data Broker Removal Services Actually Work? A Practitioner’s Answer
A practitioner’s answer on how data broker removal works under GDPR and CCPA, and when a subscription service, DIY, or full OSINT investigation is the right fit.
Is Data Broker Removal Legal in Europe Under GDPR?
Data broker removal is legal across the EU under GDPR Articles 17 and 21 — but the "legitimate interest" argument brokers rely on usually does not survive a proper balancing test.
Best Data Broker Removal Services in Europe: Country-by-Country (2026)
A verified, country-by-country comparison of data broker opt out services in France, Germany, Netherlands, Spain and the UK — using Consumer Reports 2024 results and direct pricing checks, not vendor marketing.
Data Broker Removal in Europe: What a Professional Engagement Actually Looks Like
Automated removal services average a 48 per cent success rate. Here is what a professional, human-led data broker removal engagement in Europe involves — from discovery through deletion, suppression, and ongoing monitoring.
GDPR Data Subject Access Request: Template and Complete Guide
A complete guide to GDPR Data Subject Access Requests — what the law says, what you are entitled to receive, enforcement case law, and a ready-to-use template.
How to Disappear from the Internet
A practitioner’s guide to reducing your digital footprint. What you can remove yourself, what persists regardless, and where DIY efforts reach their structural limit.
Why Data Broker Opt-Outs Don't Stick: The Bounce-Back Problem Explained
A realistic framework for data broker removal: how broker tiers work, why deletions bounce back, and how to use GDPR/CCPA leverage effectively.
Data Brokers in the United States: No Federal Law, 25 Brokers, and How to Opt Out
The US has no comprehensive federal privacy law. Data brokers hold vast quantities of personal data on Americans with almost no legal obligation to stop. What the FCRA and state patchwork cover, 25 brokers with opt-out links, and why California's DELETE Act in 2026 changes everything.
Data Brokers in Europe: GDPR, UK Law, Germany, France — and the US Surveillance Risk Nobody Warned You About
GDPR gives Europeans powerful rights over their data. But data brokers exploit legitimate interest loopholes, US surveillance law undermines every EU-US transfer framework, and a third Schrems ruling may invalidate the current system again. A complete guide to EU privacy law, major fines, and how to use your rights.
Data Brokers in Australia and New Zealand: What They Hold, What the Law Allows, and How to Get Out
Australia has had some of the world's largest data breaches. But most Australians don't realise data brokers legally hold and sell their personal data every day — with few legal obligations to stop. What the law says, who the 25 biggest brokers are, and how to opt out.
All Odido Data Is Now Online. Here Is What Happens Next.
When stolen data moves from 'for sale' to 'free for anyone', the real damage begins. Here is what typically happens next — illustrated with real Dutch and European cases.
The Right to Delete Your Data Exists. Data Brokers Are Ignoring It.
35 brokers hid their opt-out pages from Google. 43% ignored deletion requests entirely. California’s DROP platform is the strongest answer yet. Here is the evidence, and what it still does not reach.
15 Major Data Brokers: Direct Opt-Out Links (2026)
A practical guide to identifying data brokers holding your personal information and the most effective removal strategies available — including what they won't tell you.
If you want long-term removal across the broker ecosystem, the Eraser runs the multi-week purge.
Reduce broker exposure