Data Brokers Sell Your Personal Information – How to Protect Yourself

Individuals using popular social media platforms like Instagram and Facebook often unknowingly agree to terms of service that allow their personal data to be sold to third parties for commercial purposes. Companies like Meta and Google must comply with the GDPR and the LOPD, but data brokers – firms specializing in collecting, analyzing, and selling data from public sources and databases – operate outside these regulations.

The Growing Data Broker Market

The global data broker market is estimated to be over $200 billion, comprised of approximately 4,000 companies. These brokers track users’ online activity, often through cookies, downloaded apps, and publicly available information.

Risks of Data Broker Activity

Data brokers can compile detailed profiles of individuals, potentially influencing decisions regarding loans, insurance, and even security. In extreme cases, this information has been used for malicious purposes, as demonstrated by the 2020 murder of a U.S. federal judge’s son, whose address was obtained through a data broker.

Regulatory Efforts and User Rights

The FTC recently banned Kochava, a data broker, from selling location data revealing sensitive information without explicit consent. The EU has stringent data protection laws requiring clear and affirmative consent, and users have the right to know who is handling their information and its purpose. Gmail offers a clue by revealing subdomains before the @ symbol.

Protecting Your Privacy

Users can check for data sales by adding a plus sign and the service name (e.g., +amazon) to their email address. It’s crucial to be aware of data broker activity and take steps to limit the information shared online.