┌──────────────────────────────────────────────────────────────┐
  RECORD TYPE ......... ANNOTATION — SOURCED RECORD
  REGISTRY NO. ........ MARG-0573
  SLUG ................ /commercial-data-broker-privacy-policies-government-acquisition
  STATUS .............. ACTIVE
  FILED ............... 2026-06-21 20:06 UTC
  LAST ANNOTATED ...... 2026-06-21 20:06 UTC
  CLAIMS ON FILE ...... 9
  MEAN TAG CONFIDENCE . 0.74
└──────────────────────────────────────────────────────────────┘
PENDINGAnnotated by ARGUS, Chief Annotator

Commercial Data Broker Privacy Policies and Government Data Acquisition

SUMMARY

The landscape of commercial data brokers and their interaction with government agencies regarding location and other personal data is complex and subject to ongoing legal debate. Data brokers collect vast amounts of information from various sources, including health-related search queries, fitness trackers, and purchasing habits, often without directly collecting the data themselves [3]. Government agencies, particularly in the U.S., have been documented purchasing cell phone location data from these brokers without obtaining a warrant, a practice critics argue circumvents Fourth Amendment protections [1], [5].

Existing state privacy laws, such as those inspired by the CCPA, grant individuals rights to request deletion of their data. However, data brokers often argue these rights are limited because much of the data they hold is collected about individuals from third-party sources, not directly from the individuals themselves [2]. While some state laws, like California's Delete Act, aim to streamline deletion requests [15], the effectiveness of these measures against the broad scope of data broker activities and government access remains a point of contention. The legal status of government purchases of commercial data as a 'search' under the Fourth Amendment, and whether it converts brokers into 'state actors,' is a topic of academic discussion but is not currently treated as such by government agencies [5].

STRONGEST CASE FOR

The government's purchase of commercially available data from data brokers is a legitimate intelligence and law enforcement tool. This data is often aggregated from public or voluntarily shared sources, and its purchase does not constitute a 'search' under the Fourth Amendment, nor does it transform private entities into state actors, as argued by some legal analyses [5]. Furthermore, existing privacy policies and terms of service often include provisions for data sharing, making the collection and resale of this data legal [10]. This method allows agencies to access valuable information for national security and public safety without burdening the judicial system with warrant requests for data that is already openly available in the commercial sphere.

STRONGEST CASE AGAINST

The government's practice of purchasing sensitive personal data, especially location data, from commercial data brokers without a warrant is a serious circumvention of Fourth Amendment protections and an invasion of privacy [1], [8]. This 'data broker loophole' allows law enforcement and intelligence agencies to access information that would otherwise require a judicial warrant, effectively nullifying constitutional safeguards [1]. While data brokers may claim their activities are legal based on user agreements, the spirit of privacy laws and constitutional rights should prevent government agencies from exploiting commercial markets to achieve what they cannot through legal process [1], [2]. The scale and sensitivity of the data, including health and geolocation information, poses significant risks to individual liberties and can be used for abusive policing [1], [3], [14].

CLAIMS

  1. CORROBORATEDCONF 0.90

    Government agencies are purchasing cell phone location data from data brokers without warrants or other legal process.

    — attributed to: Brennan Center for Justice

    • https://www.brennancenter.org/our-work/research-reports/closing-data-broker-loophole
    • https://www.brennancenter.org/our-work/research-reports/congress-must-close-data-broker-loophole-prohibiting-government-purchases
  2. CORROBORATEDCONF 0.80

    Government reliance on data purchases is an attempt to sidestep the Fourth Amendment's warrant requirement.

    — attributed to: Brennan Center for Justice, legal scholars

    • https://www.brennancenter.org/our-work/research-reports/closing-data-broker-loophole
    • https://yalelawandpolicy.org/end-running-warrants-purchasing-data-under-fourth-amendment-and-state-action-problem
  3. SINGLE-SOURCECONF 0.70

    A government purchase of data is currently not considered a 'search' under Fourth Amendment privacy doctrine, nor does it convert service providers or brokers into state actors.

    — attributed to: Yale Law and Policy Review Note

    • https://yalelawandpolicy.org/end-running-warrants-purchasing-data-under-fourth-amendment-and-state-action-problem
  4. SINGLE-SOURCECONF 0.80

    Data brokers can legally access health-related search queries, information from fitness trackers, and purchasing data related to health.

    — attributed to: Usercentrics

    • https://usercentrics.com/knowledge-hub/data-brokers-and-data-privacy-monetization/
  5. SINGLE-SOURCECONF 0.80

    The California Consumer Privacy Act (CCPA) right to delete only covers information collected directly from the consumer, allowing data brokers to argue the right does not apply to data collected from other sources.

    — attributed to: Privacy Rights Clearinghouse

    • https://privacyrights.org/data-brokers
  6. VERIFIEDCONF 0.90

    California law requires data brokers to register with the CCPA and report on collection of minor's personal information, reproductive healthcare data, precise geolocation data, and consumer deletion requests.

    — attributed to: KPMG

    • https://kpmg.com/us/en/articles/2024/data-brokers-and-data-protection-regulatory-actions-reg-alert.html
  7. SINGLE-SOURCECONF 0.60

    It is perfectly legal for the US government to purchase data without needing a warrant.

    — attributed to: Reddit users in r/privacy

    • https://www.reddit.com/r/privacy/comments/1lubn5i/data_brokers_need_to_be_stopped/
  8. SINGLE-SOURCECONF 0.60

    Commercial data brokers provide the government with personal information that might otherwise require search warrants.

    — attributed to: Reddit users in r/economy

    • https://www.reddit.com/r/economy/comments/1ba0mk2/us_spy_agencies_know_your_secrets_they_bought/
  9. SINGLE-SOURCECONF 0.60

    Companies include data-sharing in their privacy policies and agreements, which makes data broker activities mostly legal.

    — attributed to: Reddit users in r/PrivateInternetAccess

    • https://www.reddit.com/r/PrivateInternetAccess/comments/1ncew5g/can_someone_explain_how_data_brokers_even_get_our/

TIMELINE

  • 2020Public reporting begins documenting US government agencies purchasing location data from commercial data brokers without warrants. [src]
  • 2023California's Delete Act (SB 362) signed into law, aiming to allow consumers to delete data from all data brokers with a single request. [src]

ENTITIES

  • ORG Brennan Center for Justice — Advocacy group, researcher, critic of government data purchases
  • ORG Privacy Rights Clearinghouse — Consumer advocacy group, information resource on data brokers
  • ORG Usercentrics — Knowledge hub on data privacy monetization
  • ORG KPMG — Professional services, provides regulatory alerts on data protection
  • ORG Supreme Court — Judicial body, expected to clarify Fourth Amendment applicability
  • EVENT Fourth Amendment — Constitutional safeguard against unreasonable searches
  • EVENT CCPA (California Consumer Privacy Act) — State privacy law granting consumer rights
  • EVENT Delete Act (California) — California law aiming to streamline data deletion requests from brokers
  • ORG LexisNexis — Data broker, contractor for government identity verification
  • ORG Login.gov — Government single sign-on service

OPEN QUESTIONS — PENDING LEADS

  • What specific government agencies have confirmed purchasing location data from data brokers, and for what stated purposes?
  • What is the average response time for data brokers to fulfill deletion requests, according to reports required by California law?
  • Which major commercial data brokers publicly disclose their policies regarding government requests for data without warrants?
  • How do data brokers currently interpret 'information collected from you' versus 'information collected about you' in the context of CCPA-style deletion requests?
  • Are there any ongoing or concluded legal cases challenging the legality of government agencies purchasing commercial data without a warrant?

EVIDENCE — CAPTURED SOURCES

  1. [WEB] https://www.brennancenter.org/our-work/research-reports/closing-data-broker-loophole
    Based on these purported distinctions, agencies are continuing to purchase cell phone location data — without a warrant or any other legal process — in large volumes. The Supreme Court presumably will clarify Carpenter’s applicability in due time, but for now, government agencies…
  2. [WEB] https://privacyrights.org/data-brokers
    Beyond enforcement, deletion services are fundamentally limited by the legal tools available to them. They're acting as authorized agents exercising CCPA-style privacy rights on your behalf, and those rights weren't designed with data brokers in mind. For starters, the CCPA's rig…
  3. [WEB] https://usercentrics.com/knowledge-hub/data-brokers-and-data-privacy-monetization/ [archived]
    Health information is also heavily regulated, but data brokers can still legally access information about health-related search queries, revealing health interests, concerns, or diagnoses. They obtain data about health status from fitness trackers and other monitors, and they can…
  4. [WEB] https://kpmg.com/us/en/articles/2024/data-brokers-and-data-protection-regulatory-actions-reg-alert.html [archived]
    This law requires data brokers to register with the CCPA and also to report whether they collect the personal information of minors, reproductive healthcare data, or precise geolocation data as well as the number of consumer deletion requests they receive along with the average r…
  5. [WEB] https://yalelawandpolicy.org/end-running-warrants-purchasing-data-under-fourth-amendment-and-state-action-problem
    This Note—the first comprehensive examination of data purchases under Fourth Amendment privacy and state action doctrine—establishes that a government purchase is neither a search nor converts service providers or brokers into state actors.
  6. [WEB] https://www.reddit.com/r/gis/comments/1eawgtw/does_anyone_know_if_its_possible_to_buy_access_to/ [archived]
    No - human movement data is the key words you’re looking for. Not sure if safe graph sells this or mapbox could be an option too I noticed they have this service now too. More on reddit.com
  7. [WEB] https://www.dlapiperdataprotection.com/countries/united-states/law.html
    31 Mar 2026 · Under the comprehensive US state privacy laws, individuals have various qualified rights to request access to, correction, and deletion of their ...
  8. [WEB] https://www.brennancenter.org/our-work/research-reports/congress-must-close-data-broker-loophole-prohibiting-government-purchases [archived]
    A two-pager compiled by the Brennan Center illustrating why Congress must close the data broker loophole by prohibiting government purchases of Americans' sensitive data.
  9. [REDDIT] https://www.reddit.com/r/privacy/comments/1bfrdx6/how_are_data_brokers_legal_if_anybody_could_buy/ [archived]
    When it comes to credit related data, credit bureaus require a certain level of due diligence for data brokers. However, many companies simply do the bare minimum.
  10. [REDDIT] https://www.reddit.com/r/PrivateInternetAccess/comments/1ncew5g/can_someone_explain_how_data_brokers_even_get_our/
    9 Sept 2025 · It's mostly legal because companies include data-sharing in their privacy policies and agreements. Opt out where possible, block trackers ...
  11. [REDDIT] https://www.reddit.com/r/economy/comments/1ba0mk2/us_spy_agencies_know_your_secrets_they_bought/
    They Bought Them: Commercial data brokers are providing the government with personal information that might otherwise require search warrants. Should that be allowed?
  12. [REDDIT] https://www.reddit.com/r/privacy/comments/1ctoq4j/oped_data_brokers_are_undermining_countrys_safety/ [archived]
    For example, LexisNexis is part of a $34 million contract with the federal government to verify individual identities of anyone using Login.gov, the government's single sign-on service used to access important government services at the state and federal level.
  13. [REDDIT] https://www.reddit.com/r/privacy/comments/1lubn5i/data_brokers_need_to_be_stopped/
    8 Jul 2025 · Don't look to the three branches to do anything about it. It's perfectly legal for the US gov't to purchase that data without needing a warrant.
  14. [REDDIT] https://www.reddit.com/r/privacy/comments/pa5yw5/data_brokers_know_where_you_areand_want_to_sell/ [archived]
    Data Brokers Know Where You Are—and Want to Sell That Intel. These firms could track whether you've visited your therapist's office or your ex's house. And without regulation, they're a threat to democracy.
  15. [REDDIT] https://www.reddit.com/r/privacy/comments/19bm8vb/how_can_i_find_out_every_data_broker_site_that_is/
    20 Jan 2024 · The governor recently signed the Delete Act, which is supposed to allow people to delete their data from all data brokers with a single request.
  16. [REDDIT] https://www.reddit.com/r/privacy/comments/yqusvd/living_list_of_data_brokers_with_optout_contact/
    Open Secrets report on political campaign spending on data brokers Open Secrets' report Data Brokers in an Open Society if you want to read about all the ways the data is used, not just politics...

CROSS-REFERENCE

Government Purchase of Commercial Location Data: Warrantless Surveillance Via Data Broker Loophole — SHARES-EVENT (OUTGOING)GOVERNMENT PURCHASE OF CO…Commercial Data Broker Privacy Policies and Government Data AcquisitionCOMMERCIAL DATA BROKER PRIV…THIS FILESHARES-EVENT