Analysis: of the 750 data brokers registered in at least one US state, many haven't registered in states with transparency laws, undermining data deletion tools
Written in collaboration with Privacy Rights Clearinghouse — Hundreds of data brokers have not registered with state consumer protection agencies. Forums: r/technology Forums: r/technology : Why Are Hundreds of Data Brokers Not Registering with States?
Context & Ripple Effects
State-level broker registries were intended to make a largely opaque market visible: Vermont’s early registration requirement produced a public list of 121 brokers, but later coverage found that registration laws were still inadequately enforced despite their transparency mandate.
This analysis, produced with Privacy Rights Clearinghouse, shows the problem persists across states: appearing in one registry does not mean a broker is visible wherever consumers may try to exercise deletion rights. That gap matters more after the CFPB withdrew its tighter data-broker proposal, leaving state systems as a key transparency mechanism.
First-order effects
- Consumers using state-linked deletion or opt-out tools may not reach brokers that have failed to register, leaving some copies of their data outside those workflows.
- State consumer-protection agencies have incomplete visibility into firms subject to their transparency laws, weakening their ability to administer and enforce those regimes.
Second-order effects
- Deletion-service providers and privacy advocates must treat registry-based broker lists as incomplete, increasing the difficulty of representing the scope of a consumer’s request.
- Brokers that do register face an uneven compliance environment when peers can avoid the same disclosure obligations without appearing in a state’s official inventory.
Third-order effects
- If cross-state nonregistration remains common, state-by-state registries risk becoming a patchwork of partial directories rather than a dependable data-rights infrastructure.
- The pattern strengthens the case for enforcement mechanisms and interoperable broker identification; without them, consumer deletion rights may continue to vary with the completeness of each state’s registry.
The trend: Data-rights laws are moving from formal consumer entitlements toward the harder operational question of whether regulators can reliably identify every intermediary that holds and sells personal data.