What is a data broker?

Updated Corrections

September 18, 20261 min read

A data broker collects personal data, often from public records and commercial sources, then packages and sells or shares it.1 People-search sites are the most visible type; marketing and risk firms also broker data you may never see.2 You are usually not the customer. Opt-outs exist for many people-search sites, but listings can return when sources refresh.

Sources

Frequently asked questions

What's the difference between a data broker and a credit bureau?

Credit bureaus are heavily regulated under the FCRA for credit, insurance, and employment reporting uses. Many data brokers sell people-search or marketing data outside those uses. Some risk products can fall under the FCRA when used for covered purposes, so it isn't true that no broker is ever regulated.

Are people-search sites data brokers?

Yes, they're the consumer-visible slice: searchable profiles built from public records and commercial data. See what is a people-search site, plus the Spokeo and Whitepages removal guides.

Can I remove myself?

Often yes from people-search sites, via each site's opt-out or a service. Expect re-checks, because public records upstream may remain. Guide: how to remove yourself from data brokers.

Is there an official national list of all data brokers?

No authoritative national count exists. State registries and private rosters measure different slices, so treat big totals as estimates unless a source backs the method.

What does Delist check?

A free scan checks open-web exposure we check: people-search sites, public records, data brokers, and breach-source signals (signals are not listings). It does not mean dump membership, and it does not mean Delist covers every broker brand by count.

See where your personal data is exposed. Start with a free scan.

See what's listed, free

A free scan checks people-search sites, public records, data brokers, and known breaches. A breach match means your data leaked somewhere; it is not a listing. The scan does not file removals, and it does not scrub a breach dump.