Free tool

Am I a data broker?

Nobody tells you. The state never writes to you and never signs you up. You're expected to work out that you qualify. Five questions to see where you likely qualify across California, Texas, Vermont, and Oregon.

Does your business collect or hold personal information about consumers?

Names, emails, phones, addresses, device IDs, demographics, behaviors.

Do you sell, license, or share that personal information with third parties?

Selling includes exchanges for money or other valuable consideration. Including some data-for-data or ad-targeting arrangements.

Is at least some of that data about people you do NOT have a direct relationship with?

A "direct relationship" means the consumer intentionally interacts with you (your customers, users, subscribers). Bought, scraped, appended, or enriched data is indirect. Lead-gen specifically: if someone filled out a form on a comparison site or a partner's landing page and you bought that lead, that is NOT a direct relationship with you, even though they filled out a form.

Is deriving revenue from personal data a meaningful part of your business?

Lead-gen, list sales, data enrichment/append, people-search, ad-audience building, marketing data.

Do you process brokered personal data on more than 50,000 individuals?

Texas's 2025 amendment (SB 2121) added this threshold in addition to the revenue test.