Skip to content

Data Broker

What is Data Broker?

An entity that collects personal information from various sources and sells or licenses it to other organizations for marketing, risk assessment, or other purposes.

Privacy and Data Protection

What the standards actually require on data broker

Requirements naming data broker across 6 standards, quoted from the control text.

In no case may a data broker or data collector sell or license sensitive data to any other individual or entity, with the section's own exemptions for HIPAA protected health information and equivalently protected information, GLBA financial institutions and da...

new-jersey-data-privacy-act::PL2026-c25-s3 · Data brokers and data collectors may never sell or license sensitive data →

Section 64.2009(e) requires telecommunications carriers + interconnected VoIP providers to file an ANNUAL COMPLIANCE CERTIFICATION with the FCC by 1 MARCH OF EACH YEAR covering the previous calendar year.

CPNI-AnnualCert · Annual compliance certification - 1 March deadline (47 CFR 64.2009(e)) →

HBNR 2024-2025 implementation status + FTC enforcement cases. STATUS: 2024 Final Rule effective 29 July 2024 + 25 April 2025 for delayed elements; FTC has published enforcement priorities + sample guidance + the FTC Health Breach Notification online form.

HBNR-Status-2024-2025-Enforcement-Cases · HBNR Implementation Status, 2024-2025 FTC Enforcement Cases and Anticipated Amendments →
CCPA/CPRA1 control

The notice at collection must be easy to read, accessible and available where the consumer meets it at or before the point data is taken: near web form fields, on app download and settings pages, on paper forms, by signage or orally for in-person or phone coll...

ccpa-cpra::CCR 7012 · Notice at collection: content, placement and third-party collection →

Ghana DPA 2012 implementation status + 2024-2025 amendment pipeline. STATUS: Act 843 in force since 2012; 2017 minor amendments (data portability + ADM); DPC operational with registration + complaints + investigations;

GhDPA-Status-2024-2025-Amendment-AI · Implementation Status, 2024-2025 Amendment Pipeline, AI/ML and EU Adequacy Aspirations →

A DPO must be appointed by public-body controllers and holders of their databases (except security bodies), data broker controllers with more than 10,000 data subjects, controllers or holders whose core activities require regular and systematic monitoring of i...

israel-protection-of-privacy-law-5741-1981::17B1 · Section 17B1: appoint a Data Protection Officer where required →

Questions people ask about data broker

What is Data Broker?
An entity that collects personal information from various sources and sells or licenses it to other organizations for marketing, risk assessment, or other purposes.
Why is Data Broker important for compliance?
Data Broker is a key concept in Privacy and Data Protection. Understanding data broker helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Data Broker?
Data Broker appears in the requirement text of New Jersey Data Privacy Act, FCC Customer Proprietary Network Information (CPNI) and Data Breach Rules (47 CFR 64.2001-2011), FTC Health Breach Notification Rule, CCPA/CPRA, Ghana Data Protection Act 2012 (Act 843). Across these standards we have identified 13 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Data Broker?
Explore our compliance framework pages to see how data broker applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Data Broker applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.