Skip to content

Data Broker

What is Data Broker?

An entity that collects personal information from various sources and sells or licenses it to other organizations for marketing, risk assessment, or other purposes.

Privacy and Data Protection

Frameworks that govern data broker

GDPRView framework →ISO 27001:2022View framework →NIST Cybersecurity Framework 2.0View framework →

What the standards actually require on data broker

Requirements naming data broker across 6 standards, quoted from the control text.

Texas Data Privacy Act2 controls

Entities that meet the Texas data broker definition (Tex. Bus. & Com. Code Ch. 509, effective Sept 2023) must register annually with the Texas Secretary of State, pay a fee, and post a website notice.

TDPSA-541-DATABROKER · Data Broker Registration Cross-Reference →
Minnesota Consumer Data Privacy Act1 control

Manage Minnesota Attorney General enforcement + data broker registration under Sections 325O.10 + 325O.13. Section 325O.10 Minnesota AG (Keith Ellison) EXCLUSIVE enforcement - NO private right of action.

MN-CDPA-Enforcement-AG-Ellison-Section-325O-10-USD-7500-Per-Violation-Data-Broker-Registration-325O-13-Sunset-25-Jan-2026 · Minnesota CDPA Enforcement + AG Ellison + Section 325O.10 + USD 7,500 Per Violation + Data Broker Registration + Sunset 25 January 2026 →
FCC Customer Proprietary Network Information (CPNI) and Data Breach Rules (47 CFR 64.2001-2011)3 controls

Section 64.2009(e) requires telecommunications carriers + interconnected VoIP providers to file an ANNUAL COMPLIANCE CERTIFICATION with the FCC by 1 MARCH OF EACH YEAR covering the previous calendar year.

CPNI-AnnualCert · Annual compliance certification - 1 March deadline (47 CFR 64.2009(e)) →
FTC Health Breach Notification Rule3 controls

HBNR 2024-2025 implementation status + FTC enforcement cases. STATUS: 2024 Final Rule effective 29 July 2024 + 25 April 2025 for delayed elements; FTC has published enforcement priorities + sample guidance + the FTC Health Breach Notification online form.

HBNR-Status-2024-2025-Enforcement-Cases · HBNR Implementation Status, 2024-2025 FTC Enforcement Cases and Anticipated Amendments →
Florida Digital Bill of Rights (FDBR)1 control

FDBR implementation status + 2024-2025 amendments + litigation. STATUS: FDBR effective 1 July 2024; amended by 2024 SB 472 (surveillance exemption clarifications + cure period refinements) + 2025 legislative session amendments (anticipated);

FDBR-Status-Pipeline-Litigation · FDBR Implementation Status, 2024-2025 Amendments, Litigation and Pipeline →
Ghana Data Protection Act 2012 (Act 843)1 control

Ghana DPA 2012 implementation status + 2024-2025 amendment pipeline. STATUS: Act 843 in force since 2012; 2017 minor amendments (data portability + ADM); DPC operational with registration + complaints + investigations;

GhDPA-Status-2024-2025-Amendment-AI · Implementation Status, 2024-2025 Amendment Pipeline, AI/ML and EU Adequacy Aspirations →

Questions people ask about data broker

What is Data Broker?
An entity that collects personal information from various sources and sells or licenses it to other organizations for marketing, risk assessment, or other purposes.
Why is Data Broker important for compliance?
Data Broker is a key concept in Privacy and Data Protection. Understanding data broker helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address Data Broker?
Data Broker appears in the requirement text of Texas Data Privacy Act, Minnesota Consumer Data Privacy Act, FCC Customer Proprietary Network Information (CPNI) and Data Breach Rules (47 CFR 64.2001-2011), FTC Health Breach Notification Rule, Florida Digital Bill of Rights (FDBR). Across these standards we have identified 11 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Data Broker?
Explore our compliance framework pages to see how data broker applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how Data Broker applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.