What Information Must Data Brokers Delete?

If a consumer is matched in a broker’s records, the broker must delete:

• Identifiers (name, email, phone).

• Device identifiers (cookies, MAIDs).

• Behavioral and transactional data.

• Location data.

• Inferences (such as interests, income range, or political affiliation).

Deletion must apply across all systems and vendors, unless a narrow legal exception applies.

For detailed implementation guidance, workflow templates, and regulator-ready documentation tools, visit the CLIClaw Data Broker Compliance Library.