The data brokers Congress forgot to regulate
The SECURE Data Act and the GUARD Financial Data Act offer a potential solution to the lack of federal regulation of data brokers, but both bills leave significant gaps in protecting consumers from t…
The SECURE Data Act and the GUARD Financial Data Act offer a potential solution to the lack of federal regulation of data brokers, but both bills leav
Read Full Story at The Hill →Why This Matters
The unchecked proliferation of data brokers represents one of the most quietly consequential regulatory gaps in modern governance. While lawmakers debate high-profile privacy bills, these firms quietly trade in millions of Americans’ personal, financial, and biometric data—often without consent or recourse. The stakes extend beyond privacy; they touch on systemic risks like identity theft, discriminatory targeting, and the erosion of democratic accountability in an era where data fuels both corporate power and state surveillance.
Background Context
Congress’s failure to pass a comprehensive federal privacy law has left data brokers operating in a legal gray zone since the 2010s, when the FTC first warned about their opaque practices. While Europe’s GDPR and California’s CCPA set precedents for consumer data rights, the U.S. has relied on piecemeal guidance—leaving brokers free to resell everything from browsing histories to geolocation data to hedge funds, political campaigns, and law enforcement. The SECURE Data Act and GUARD Financial Data Act, despite their names, largely defer to existing loopholes rather than impose binding restrictions.
What Happens Next
The fate of these bills hinges on whether lawmakers prioritize them in the next legislative cycle—or whether they’ll be buried under partisan gridlock or industry lobbying. Meanwhile, state-level actions, like California’s expanded deletion rights, may force brokers to adapt unevenly, creating a patchwork of compliance costs that could push smaller firms out of the market. Watch for court rulings on the FTC’s pending case against data broker Kochava, which could redefine whether such sales violate existing consumer protection laws.
Bigger Picture
This saga reflects a broader pattern: In the absence of federal action, power consolidates in the hands of a few unregulated intermediaries, while consumers and small businesses bear the costs of adaptation. It also underscores how financialization and surveillance have merged, with brokers now acting as de facto credit bureaus for non-traditional data like social media activity. Without structural reform, the path forward increasingly resembles a corporate-led “privacy arms race”—one where only the biggest players can afford to play by the rules.
