EFF Reveals Data Brokers Ignoring CCPA Opt-Outs, Risking Privacy

A recent EFF investigation reveals data brokers are ignoring state privacy laws, with 40% disregarding opt-out requests under California's Consumer Privacy Act, exposing millions to identity theft and surveillance. Regulatory gaps persist amid industry lobbying, but emerging tools and proposed legislation offer hope. Consumers must demand accountability to protect their data.
EFF Reveals Data Brokers Ignoring CCPA Opt-Outs, Risking Privacy
Written by Zane Howard

In the shadowy world of data brokerage, where personal information is commodified and traded like stocks, a new scandal has emerged that underscores the industry’s cavalier attitude toward consumer rights. According to a recent investigation by the Electronic Frontier Foundation, many data brokers are flagrantly disregarding state privacy laws by failing to honor opt-out requests from individuals seeking to reclaim control over their data. This isn’t just a minor oversight; it’s a systemic failure that leaves millions vulnerable to identity theft, targeted scams, and unwarranted surveillance.

The problem came to light through a study examining compliance with California’s Consumer Privacy Act, which mandates that companies provide accessible ways for users to access, delete, or opt out of data sales. Researchers found that four in ten brokers simply ignored these requests, violating the law and eroding trust in an already opaque sector. As one industry insider noted, these firms operate in a regulatory gray zone, profiting from vast troves of personal details scraped from public records, social media, and even location tracking without explicit consent.

Regulatory Gaps and Enforcement Challenges

Federal oversight has been piecemeal at best. The Federal Trade Commission recently finalized settlements with companies like Mobilewalla, Inc., for improper data handling, imposing fines and requiring better transparency. Yet, as detailed in a TrustArc report from April 2025, data brokers continue to amass billions of data points on Americans, often inaccurate ones that can deny people credit or jobs. The FTC’s actions, while commendable, highlight a broader issue: without comprehensive federal legislation, states are left patching holes in a leaky dam.

Compounding this, a UC Irvine study published in July 2025 revealed that over 500 state-registered brokers are exploiting loopholes, raising legal alarms about unchecked data aggregation. Industry executives argue that self-regulation suffices, but consumer advocates counter that the $270 billion market incentivizes evasion over ethics.

The Human Cost of Data Exploitation

For everyday individuals, the stakes are personal and profound. Posts on X from privacy-focused accounts, such as those from the Electronic Frontier Foundation, echo widespread frustration, with users reporting futile attempts to scrub their data from broker databases. One viral thread highlighted how brokers sell sensitive info like Social Security numbers and addresses to anyone willing to pay, fueling everything from stalking to foreign espionage.

This echoes warnings from the Brennan Center for Justice, which calls for closing loopholes that allow government agencies to buy data, bypassing Fourth Amendment protections. A recent X post by a cybersecurity expert underscored a 2025 executive order aimed at curbing data transfers to countries like China, yet brokers persist in flouting such measures.

Industry Pushback and Emerging Solutions

Data brokers aren’t taking this lying down. Lobbying efforts, as exposed in a 2022 analysis by privacy researcher Wolfie Christl on X, show firms like Acxiom and TransUnion fighting to weaken proposed federal privacy laws. Meanwhile, companies like DeleteMe are gaining traction with services that automate opt-outs, as noted in their August 2025 newsletter on facial recognition and broker tactics.

Innovative tools are emerging, too. Reklaim’s July 2025 update introduced real-time breach alerts and Vermont-specific opt-outs, empowering users amid growing awareness. A Forbes council post from late 2024 warned that without stricter rules, the hidden threats will only multiply.

Toward a Privacy-First Future

The path forward demands bold action. The Consumer Financial Protection Bureau’s 2024 proposal to limit sensitive data sales, praised in X posts by Director Rohit Chopra, could set a precedent if expanded. Yet, as a 9to5Mac article from August 14, 2025, aptly puts it, brokers’ latest antics—hiding opt-out pages from search engines—provide yet another reason for outrage, pushing consumers to demand accountability.

Experts predict that by 2026, with mounting lawsuits and public pressure, the industry may face its reckoning. For now, insiders advise vigilance: regularly check broker registries, use privacy tools, and support legislation like the Protecting Americans’ Data from Foreign Adversaries Act. In this high-stakes game, knowledge is the ultimate defense against an industry that views personal data as mere currency.

Subscribe for Updates

WebProBusiness Newsletter

News & updates for website marketing and advertising professionals.

By signing up for our newsletter you agree to receive content related to ientry.com / webpronews.com and our affiliate partners. For additional information refer to our terms of service.

Notice an error?

Help us improve our content by reporting any issues you find.

Get the WebProNews newsletter delivered to your inbox

Get the free daily newsletter read by decision makers

Subscribe
Advertise with Us

Ready to get started?

Get our media kit

Advertise with Us