Data Broker
What is Data Broker?
An entity that collects personal information from various sources and sells or licenses it to other organizations for marketing, risk assessment, or other purposes.
Frameworks that govern data broker
What the standards actually require on data broker
Requirements naming data broker across 6 standards, quoted from the control text.
In no case may a data broker or data collector sell or license sensitive data to any other individual or entity, with the section's own exemptions for HIPAA protected health information and equivalently protected information, GLBA financial institutions and da...
new-jersey-data-privacy-act::PL2026-c25-s3 · Data brokers and data collectors may never sell or license sensitive data →Section 64.2009(e) requires telecommunications carriers + interconnected VoIP providers to file an ANNUAL COMPLIANCE CERTIFICATION with the FCC by 1 MARCH OF EACH YEAR covering the previous calendar year.
CPNI-AnnualCert · Annual compliance certification - 1 March deadline (47 CFR 64.2009(e)) →HBNR 2024-2025 implementation status + FTC enforcement cases. STATUS: 2024 Final Rule effective 29 July 2024 + 25 April 2025 for delayed elements; FTC has published enforcement priorities + sample guidance + the FTC Health Breach Notification online form.
HBNR-Status-2024-2025-Enforcement-Cases · HBNR Implementation Status, 2024-2025 FTC Enforcement Cases and Anticipated Amendments →The notice at collection must be easy to read, accessible and available where the consumer meets it at or before the point data is taken: near web form fields, on app download and settings pages, on paper forms, by signage or orally for in-person or phone coll...
ccpa-cpra::CCR 7012 · Notice at collection: content, placement and third-party collection →Ghana DPA 2012 implementation status + 2024-2025 amendment pipeline. STATUS: Act 843 in force since 2012; 2017 minor amendments (data portability + ADM); DPC operational with registration + complaints + investigations;
GhDPA-Status-2024-2025-Amendment-AI · Implementation Status, 2024-2025 Amendment Pipeline, AI/ML and EU Adequacy Aspirations →A DPO must be appointed by public-body controllers and holders of their databases (except security bodies), data broker controllers with more than 10,000 data subjects, controllers or holders whose core activities require regular and systematic monitoring of i...
israel-protection-of-privacy-law-5741-1981::17B1 · Section 17B1: appoint a Data Protection Officer where required →Questions people ask about data broker
What is Data Broker?
Why is Data Broker important for compliance?
Which compliance frameworks address Data Broker?
Where can I learn more about Data Broker?
See how Data Broker applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.