What 603 data brokers admit when the state makes them answer
Under California’s Delete Act, every data broker operating in the state must file a sworn annual registration disclosing what categories of personal information it collects, who it sold that information to, and how many deletion requests it received, complied with and denied.
We ingested all 603 of them. Almost nobody reads these filings. They are considerably more revealing than anything the industry says voluntarily.
What happens when people ask to be deleted
How to read these figures. Request volumes are dominated by a handful of adtech brokers processing automated opt-out signals in the tens of millions, so the raw totals are not a per-person compliance rate. What they do show reliably is the shape of the industry: enormous automated volume at one end, and at the other, a set of consumer-facing brokers refusing a substantial share of the human beings who wrote to them.
What they collect, and who they sell it to
Each row is a question California requires brokers to answer under oath. The count is how many said yes.
Sold or shared data with a foreign actor
In the past year, by their own disclosure.
Name them
- Asset International, Inc.
- Chartboost, LLC
- Cision
- CoStar Realty Information, Inc.
- Crimson Hexagon
- Effyis, Inc.
- Epsilon Data Management, LLC
- Healthcare Inc
- HubSpot, Inc.
- Hunter Web Services, Inc
- Institutional Shareholder Services Inc.
- L.S Mobile Apps Holdings LTD
- LightBox Parent, L.P.
- Lightcast, LLC
- MaxMind, Inc.
- Meltwater News US, Inc.
- Moody's Corporation
- Ogury Ltd
- Onfocus SAS
- Orgio, Inc.
- PitchBook Data Inc
- Preqin Ltd
- Semcasting, Inc.
- Similarweb Ltd.
- Snovio Inc
- Ziff Davis LLC
Sold or shared data with a developer of a generative AI system
California only began asking this question recently. The answers are worth reading.
Name them
- BV Insights LLC
- Clay Labs, Inc.
- Consumerbase, LLC
- Crimson Hexagon
- Crunchbase, Inc.
- Data Axle Inc.
- Dun and Bradstreet Inc.
- Effyis, Inc.
- Endgame Labs, Inc.
- Equifax Information Services LLC
- Experian Marketing Solutions, LLC
- Eyeota Pte Ltd
- iSpot.tv, Inc.
- J2 Martech Corp
- Komodo Health, Inc.
- Lead Intelligence Inc.
- Lead411 Corporation
- MaxMind, Inc.
- Meltwater News US, Inc.
- Moody's Corporation
- Ocean Global Inc
- PitchBook Data Inc
- Project Affinity, Inc.
- Randall-Reilly, LLC
- RocketReach LLC
- Similarweb Ltd.
- Sovrn, Inc.
- Sprout Social, Inc.
- Swarm Holdings, Inc.
- TransUnion Risk and Alternative Data Solutions, Inc.
- Warmly, Inc.
- West Publishing Corp
Sold or shared data with law enforcement
Excluding cases where they were legally compelled to. This is the commercial purchase of data that would otherwise need a warrant.
Name them
- Airlines Reporting Corporation
- Babel Street, Inc.
- Clearview AI, Inc.
- Crimson Hexagon
- Crunchbase, Inc.
- DTN, LLC
- Dun and Bradstreet Inc.
- Enformion, LLC
- Equifax Information Services LLC
- Equifax Workforce Solutions LLC
- Fog Data science LLC
- Interactive Data, LLC
- LexisNexis Risk Solutions FL Inc.
- MaxMind, Inc.
- Melissa Data Corporation
- Meltwater News US, Inc.
- Moody's Corporation
- Pen-Link, Ltd.
- Pipl, Inc.
- PitchBook Data Inc
- Preqin Ltd
- PropertyRadar, Inc.
- RELX Inc.
- RocketReach LLC
- Spokeo, Inc.
- SpyCloud Inc.
- The Alesco Group LLC
- West Publishing Corp
Collect personal information about minors
Children's records, held commercially.
Name them
- Acxiom LLC
- Airlines Reporting Corporation
- BDO GCI, LLC
- BV Insights LLC
- Comscore, Inc
- Consumerbase, LLC
- Data Axle Inc.
- EAB Global, Inc.
- Equifax Information Services LLC
- Equifax Workforce Solutions LLC
- Experian Marketing Solutions, LLC
- Famous Birthdays LLC
- LexisNexis Risk Solutions FL Inc.
- Marriott International, Inc.
- Neustar Information Services, Inc.
- SpyCloud Inc.
- Trans Union LLC
- VRTCAL Markets Inc.
Collect government-issued identification numbers
Driver's licence, passport, Social Security — the identifiers used to verify you everywhere else.
Name them
- Acxiom LLC
- Aristotle International, Inc.
- Astoria Company
- BDO GCI, LLC
- Buxton Company, LLC
- CDK Global, LLC
- ClearCompany, LLC
- Cox Automotive, Inc.
- Datalink Services, Inc
- Deloitte Financial Advisory Services LLP
- Drivers History Information Sales, LLC
- Edvisors Network, Inc.
- Enformion, LLC
- Equifax Information Services LLC
- Equifax Workforce Solutions LLC
- Experian Information Solutions, Inc
- Fideo Intelligence, Inc.
- General Motors LLC
- Global Source Data Solutions Inc
- i360, LLC
- Interactive Data, LLC
- IQVIA Digital Inc.
- IXI Corporation
- Knowledge Works, Inc.
- LexisNexis Risk Solutions FL Inc.
- LiveRamp Holdings, Inc.
- Marriott International, Inc.
- National Opinion Institute, LLC
- Neustar Information Services, Inc.
- Reklaim Ltd.
- Round Sky, Inc.
- Rushmore Labs, LLC
- Salutary Data LLC.
- SheerID, Inc.
- Similarweb Ltd.
- Spokeo, Inc.
- SpyCloud Inc.
- Tauxbe Data Inc.
- TransUnion Interactive, Inc.
- TransUnion Risk and Alternative Data Solutions, Inc.
- UPS Capital Corporation
- West Publishing Corp
Collect reproductive health care data
A disclosure category that did not meaningfully exist a few years ago.
Are regulated by the Fair Credit Reporting Act
Which means they are consumer reporting agencies, and you have federal dispute rights against them rather than merely an opt-out request.
Name them
- Alliant Cooperative Data Solutions LLC
- Altair Data Resources, Inc
- AutoWeb, Inc.
- BB Direct Inc
- Buyerlink Inc.
- ClearCompany, LLC
- Datalink Services, Inc
- DecisionLinks LLC
- Drivers History Information Sales, LLC
- Equifax Information Services LLC
- Equifax Workforce Solutions LLC
- ExlService.com, LLC
- Experian Information Solutions, Inc
- Lead Intelligence Inc.
- Ownco, LLC
- Tauxbe Data Inc.
- Trans Union LLC
Collect your precise geolocation
Not your city or your postcode. Coordinates. This is the largest single category in the registry and the one with the most direct physical-safety implications.
The brokers processing the most deletion requests
Largely adtech infrastructure handling automated opt-out signals at volume. Useful context for the totals above, and a reminder of how much of this happens without any human involved.
| Broker | Requests received | Complied in full |
|---|---|---|
| Cuebiq Group, LLC | 26,285,436 | 100% |
| Azira, LLC | 5,042,679 | 100% |
| Uplead LLC | 4,063,777 | 100% |
| Peoplewhiz, Inc | 2,569,965 | 100% |
| Fifty Technology Ltd | 1,145,868 | 100% |
| Focus USA, Inc. | 965,924 | 100% |
| Fourleaf LLC | 953,753 | 100% |
| Cybba Inc. | 933,375 | 100% |
| Semcasting, Inc. | 932,924 | 95% |
| Share Local Media, Inc. | 892,395 | 100% |
| AGR Marketing Solutions LLC | 846,141 | 100% |
| SalesIntel Research, Inc. | 786,044 | 100% |
| LionShare Marketing, Inc | 749,588 | 100% |
| Redi-Data Inc | 617,950 | 100% |
| Dice Career Solutions, Inc. | 453,710 | 100% |
Use this. Please.
Everything here is derived from a public government filing and we claim no ownership of the underlying facts. Cite it, check it, or tell us we have read it wrong.
The ingest script is part of our codebase and the transformation is simple: parse the registry CSV, normalise the yes/no disclosure columns, compute compliance percentages only where a broker reported 25 or more requests.
We deliberately do not quote a percentage below that threshold, because a broker that received three requests and denied one is not a 33% denial rate in any meaningful sense.
If you find an error in our reading of the data, write to us and we will correct it and say that we did.
What this means for you personally
Every one of these 603 brokers is registered in California, which means every one of them is legally obliged to honour a DROP filing and to check the platform at least every 45 days.
If you are a California resident, that is one request against all of them. If you are not, it is a statutory demand under your own state’s law where you have one, and a per-broker request where you do not.