The definition of a data broker varies among jurisdictions. Generally, a data broker is an organization that collects, purchases, licenses, shares, sells, or otherwise makes personal information available to third parties and meets the requirements established by applicable law.
Data brokers may engage in activities involving:
-
Marketing information;
-
Audience and demographic information;
-
Contact information;
-
Online activity information;
-
Consumer profiling information;
-
Advertising and analytics information; and
-
Other information that may be associated with individuals.
Because state definitions and exemptions differ, organizations should carefully evaluate how information is collected, used, and disclosed and periodically assess whether applicable data broker laws may affect their operations.
For operational guidance and structured compliance documentation tools, visit the CLIClaw Data Broker Compliance Library.
This FAQ is provided for general informational purposes only and is not legal advice. It is intended as a starting point for understanding the issues discussed and should not be relied on as a substitute for advice from qualified legal counsel.