The Basic Definition
A data broker is a company that collects personal information about individuals and sells it — either as individual records or as access to a searchable database — to anyone who pays. The buyers can be marketers, employers, landlords, private investigators, or members of the general public using a consumer-facing people-search site.
The defining feature of a data broker is that it operates without a direct relationship with the people whose information it collects. You never applied to Spokeo. You never agreed to be in Intelius. You didn't sign up with BeenVerified. They built their databases by scraping public records, purchasing data from other companies, and aggregating information from dozens of sources — and then they sell access to that aggregated profile to whoever is willing to pay for it.
How the Ecosystem Works
The data broker industry isn't a handful of websites — it's an ecosystem of hundreds of companies, most of which are invisible to consumers. The sites you've heard of (Spokeo, Whitepages, BeenVerified) are the consumer-facing end of the industry. They sell individual records to individuals. But behind them is a larger industry of wholesale data brokers that sell massive databases to other businesses: credit bureaus, marketing firms, insurance companies, financial institutions, and the consumer-facing people-search sites themselves.
These wholesale brokers — companies like LexisNexis Risk Solutions, TransUnion, Acxiom, and Equifax (beyond credit data) — hold far more comprehensive data than any consumer people-search site and are harder to opt out of. Their customers aren't individuals doing a name search; they're corporations with data licensing agreements.
The consumer-facing sites that investigators most need to worry about sit on top of this infrastructure. They license data from wholesale brokers, supplement it with their own public records scraping, and present it as a searchable database. When one site has your information, there's a reasonable chance that several others do too, because many of them draw from the same underlying data sources.
The Legal Framework — or Lack of It
In the United States, there is no federal law specifically regulating the data broker industry as a whole. The industry largely operates legally under a framework where:
- Public records are public — court documents, property records, voter registration, and similar government records can be collected and republished.
- Information shared voluntarily online — social media profiles, business listings, professional directories — can generally be indexed and sold.
- Purchase history and behavioral data can be sold by retailers and third parties under their own privacy policies.
Some federal laws do impose limits in specific contexts. The Fair Credit Reporting Act (FCRA) regulates how consumer reports can be used for credit, employment, and housing decisions, which is why background check services marketed for employment screening face different requirements than a general people-search site. The Gramm-Leach-Bliley Act covers financial institutions. HIPAA covers medical information. But none of these create a general right to opt out of data broker databases or require brokers to disclose what they hold about you.
State law is where most actual consumer rights exist. California's CPRA gives California residents the right to know what data brokers hold about them and to request deletion. Virginia, Colorado, Connecticut, and several other states have passed comprehensive privacy laws with data broker provisions. Some states have specific data broker registration requirements. But outside of states with strong privacy laws, your opt-out rights are largely dependent on whatever process the broker chooses to provide voluntarily.
Why Investigators Face Higher Risk
People-search sites are used by investigators as professional tools — and by the subjects of investigations as tools to look investigators up. That symmetry is the core of the problem.
When you're working a judgment recovery case or locating a defendant, the person on the other end of that investigation may be motivated, frustrated, or hostile. They're not helpless. They have access to the same consumer-facing people-search tools that anyone else has, and those tools can surface your home address, your phone number, your family members, and your employer. For most professionals, that's an uncomfortable privacy intrusion. For investigators working adversarial cases, it's a direct personal safety risk.
The nature of investigative work also means your name appears in places a typical person's doesn't. Court filings, public case records, licensed professional databases. Someone who knows how to research — and subjects who've spent time in collections or the court system often do — can cross-reference these sources to build a profile of you as an investigator that is more complete than a simple broker search.
The answer is reducing your public footprint before an adversarial contact occurs, not after. Data broker removal is the most direct way to do that. See the removal services comparison for the options that handle this most effectively.