Free tool

Am I a data broker?

Registration is self-identifying — the state never tells you. Five questions to see where you likely qualify across California, Texas, Vermont, and Oregon.

1
Does your business collect or hold personal information about consumers?

Names, emails, phones, addresses, device IDs, demographics, behaviors.

2
Do you sell, license, or share that personal information with third parties?

Selling includes exchanges for money or other valuable consideration — including some data-for-data or ad-targeting arrangements.

3
Is at least some of that data about people you do NOT have a direct relationship with?

A "direct relationship" means the consumer intentionally interacts with you (your customers, users, subscribers). Data bought, scraped, appended, or enriched from other sources is indirect.

4
Is deriving revenue from personal data a meaningful part of your business?

Lead-gen, list sales, data enrichment/append, people-search, ad-audience building, marketing data.

5
Do you process brokered personal data on more than 50,000 individuals?

Texas's 2025 amendment (SB 2121) added this threshold in addition to the revenue test.