┌──────────────────────────────────────────────────────────────┐ RECORD TYPE ......... ANNOTATION — SOURCED RECORD REGISTRY NO. ........ MARG-0582 SLUG ................ /epic-cdt-gao-oversight-data-brokers STATUS .............. ACTIVE FILED ............... 2026-06-21 23:30 UTC LAST ANNOTATED ...... 2026-06-21 23:30 UTC CLAIMS ON FILE ...... 6 MEAN TAG CONFIDENCE . 0.95 └──────────────────────────────────────────────────────────────┘
EPIC and CDT Recommendations for GAO Oversight of Federal Data Broker Purchases
SUMMARY
The Electronic Privacy Information Center (EPIC) and the Center for Democracy & Technology (CDT), among other civil society organizations, have actively called upon Congress and the Office of Management and Budget (OMB) to address what they term the "data broker loophole." This loophole allegedly allows federal agencies, including law enforcement and intelligence entities, to purchase commercially available personal information from data brokers without obtaining warrants, thereby circumventing Fourth Amendment protections. These organizations advocate for increased oversight and transparency regarding how government agencies acquire and utilize this data.
Key recommendations from EPIC emphasize the need to close this loophole and reform the Privacy Act of 1974. While the Government Accountability Office (GAO) is known for issuing priority recommendations to Congress to improve government programs, the provided sources do not explicitly detail specific recommendations from EPIC or CDT directly to the GAO regarding its oversight role in data broker purchases. However, the broader calls for congressional action would inherently involve or require GAO's investigative and oversight capabilities.
STRONGEST CASE FOR
The strongest argument for increased GAO oversight, as advocated by organizations like EPIC and CDT, is that federal agencies are currently exploiting a 'data broker loophole' to acquire sensitive personal data without warrants. This practice undermines Fourth Amendment protections and due process, creating a significant privacy and civil liberties threat. Explicit GAO oversight, possibly mandated by Congress, would provide independent scrutiny, ensure compliance with constitutional safeguards, and enforce greater transparency, thereby preventing government overreach and potential misuse of data purchased from commercial brokers.
STRONGEST CASE AGAINST
A counter-argument might suggest that existing internal agency oversight and legal frameworks are sufficient, or that explicit GAO oversight could hinder critical intelligence and law enforcement operations by creating undue bureaucratic hurdles. Furthermore, some might argue that if the data is commercially available to anyone, its purchase by government agencies does not constitute a Fourth Amendment violation under the third-party doctrine, thus not requiring additional, specific GAO intervention beyond existing accountability mechanisms for federal spending and data handling.
CLAIMS
- CORROBORATEDCONF 0.90
Government agencies exploit a "data broker loophole" to purchase personal information without warrants, circumventing Fourth Amendment protections.
— attributed to: EPIC (Electronic Privacy Information Center) and CDT (Center for Democracy & Technology)
- https://epic.org/new-epic-resource-calls-on-congress-to-close-the-data-broker-loophole/
- https://epic.org/epic-coalition-urge-omb-to-reign-in-agency-exploitation-of-the-data-broker-loophole-in-new-comments/
- https://cdt.org/insights/section-702-reauthorization-must-close-the-data-broker-loophole/
- VERIFIEDCONF 1.00
EPIC calls on Congress to close the data broker loophole and establish more oversight and transparency into how agencies handle commercially available information (CAI).
— attributed to: EPIC (Electronic Privacy Information Center)
- https://epic.org/new-epic-resource-calls-on-congress-to-close-the-data-broker-loophole/
- https://epic.org/epic-coalition-urge-omb-to-reign-in-agency-exploitation-of-the-data-broker-loophole-in-new-comments/
- VERIFIEDCONF 1.00
EPIC applauds Congresswoman Lori Trahan for efforts to reform the Privacy Act of 1974 to protect Americans' data from government abuse.
— attributed to: EPIC (Electronic Privacy Information Center)
- https://epic.org/documents/comments-of-epic-to-congresswoman-lori-trahan-on-efforts-to-reform-privacy-act-of-1974-and-protect-americans-data-from-government-abuse/
- VERIFIEDCONF 1.00
The GAO designates some recommendations as 'priority recommendations' which, when implemented, can save money, help Congress make decisions, and improve government programs.
— attributed to: Government Accountability Office (GAO)
- https://www.gao.gov/about/what-gao-does/recommendations
- SINGLE-SOURCECONF 0.80
In 2006, the federal government spent an estimated $30 million on purchases from private data brokers.
— attributed to: GAO-08-543T, cited by a Reddit user representing EPIC
- https://www.reddit.com/r/privacy/comments/1nx02b/we_are_the_electronic_privacy_information_center/
- VERIFIEDCONF 1.00
CDT joined over 130 civil society organizations urging Congress not to reauthorize Section 702 of the Foreign Intelligence Surveillance Act without closing the data broker loophole.
— attributed to: CDT (Center for Democracy & Technology)
- https://cdt.org/insights/section-702-reauthorization-must-close-the-data-broker-loophole/
TIMELINE
- 2006Federal government spent an estimated $30 million on purchases from private data brokers (according to GAO-08-543T). [src]
- 2013-10-07EPIC representatives cite GAO-08-543T regarding federal spending on data brokers in a Reddit AMA. [src]
- unknownEPIC publishes a one-pager calling on Congress to close the data broker loophole. [src]
- unknownEPIC and a coalition urge OMB to address agency exploitation of the data broker loophole. [src]
- unknownEPIC submits comments to Congresswoman Lori Trahan on reforming the Privacy Act of 1974. [src]
- unknownCDT joins civil society organizations to urge Congress to close the data broker loophole in Section 702 reauthorization. [src]
ENTITIES
- ORG Electronic Privacy Information Center (EPIC) — Privacy advocacy organization, calls for legislative action and oversight
- ORG Center for Democracy & Technology (CDT) — Civil liberties advocacy organization, calls for legislative action and oversight
- ORG Congress — Legislative body, target of advocacy for new legislation and oversight mandates
- ORG Government Accountability Office (GAO) — Independent agency, provides auditing, evaluation, and investigative services for Congress
- ORG Office of Management and Budget (OMB) — Executive branch office, target of advocacy for closing data broker loophole
- PERSON Lori Trahan — Congresswoman, recognized by EPIC for efforts to reform Privacy Act of 1974
OPEN QUESTIONS — PENDING LEADS
- What specific legislative proposals by Congresswoman Lori Trahan address the data broker loophole and Privacy Act reform?
- Has the GAO published any reports or specific recommendations since 2008 concerning federal agency purchases from data brokers?
- What are the official responses from OMB to EPIC and CDT's calls to close the data broker loophole?
- Are there any documented instances of GAO investigating federal agency compliance with existing data privacy regulations concerning commercially purchased data?
- What are the specific requirements and limitations on federal agency data purchases under current interpretations of the Privacy Act of 1974?
EVIDENCE — CAPTURED SOURCES
- [WEB] https://www.interface-eu.org/publications/governance_of_data_purchases_by_european_intelligence_agencies
6 days ago · Comprehensive regulation and effective oversight of agencies' use of commercially sourced data do not require a trade-off between security and ...
- [WEB] https://epic.org/new-epic-resource-calls-on-congress-to-close-the-data-broker-loophole/
EPIC published a new one-pager that calls on Congress to protect people from unchecked state surveillance. The one pager details how government agencies evade Fourth Amendment protections using the third-party doctrine as a loophole to purchase personal information from data brok…
- [WEB] https://www.govinfo.gov/content/pkg/CHRG-113shrg95838/html/CHRG-113shrg95838.htm
[Senate Hearing 113-693] [From the U.S. Government Publishing Office] S. Hrg. 113-693 WHAT INFORMATION DO DATA BROKERS HAVE ON CONSUMERS, AND HOW DO THEY ...
- [WEB] https://epic.org/epic-coalition-urge-omb-to-reign-in-agency-exploitation-of-the-data-broker-loophole-in-new-comments/
Agency exploitation of this data broker loophole is a real threat to privacy, civil liberties, and national security. The comment urges OMB to close the data broker loophole for law enforcement and intelligence agencies and establish more oversight and transparency into how agenc…
- [WEB] https://epic.org/documents/comments-of-epic-to-congresswoman-lori-trahan-on-efforts-to-reform-privacy-act-of-1974-and-protect-americans-data-from-government-abuse/ [archived]
EPIC applauds Congresswoman Trahan for taking steps to protect Americans' privacy and constitutional rights against current and future abuses.
- [WEB] https://www.gao.gov/about/what-gao-does/recommendations [archived]
We designate some of our recommendations as priority recommendations because they warrant priority attention. When implemented, some of our priority recommendations can save large amounts of money, help Congress make decisions on major issues, and substantially improve or transfo…
- [WEB] https://www.facebook.com/koco5/posts/lawmakers-warn-data-protection-rules-dont-protect-key-sites-including-white-hous/1416779190479489/
21 May 2026 · Why aren't Central Intelligence Agency (CIA) officials already under indictment? Will Congress protect our rights under the Fourth Amendment ...
- [WEB] https://cdt.org/insights/section-702-reauthorization-must-close-the-data-broker-loophole/
CDT joined more than 130 civil society organizations in urging Congress not to reauthorize Section 702 of the Foreign Intelligence Surveillance Act without closing the " data broker loophole," which law enforcement and intelligence agencies exploit by purchasing data on Americans…
- [REDDIT] https://www.reddit.com/r/privacy/comments/1nx02b/we_are_the_electronic_privacy_information_center/ [archived]
7 Oct 2013 · ... GAO-08-543T provides estimates that in 2006, the federal government spent $30 million on purchases from private data brokers. I may be ...
- [REDDIT] https://www.reddit.com/t/gao/
The CAT system, first proposed following the 2008 financial crisis, is a critical tool designed to replace the outdated OATS system and provide the Securities and Exchange Commission (SEC) with the necessary oversight of market data and transactions.
- [REDDIT] https://www.reddit.com/r/AskHistorians/comments/15k96g/friday_ama_china/ [archived]
28 Dec 2012 · This panel will answer any questions concerning Chinese history, from the earliest farmers along the Yangtze to the present day.
- [REDDIT] https://www.reddit.com/r/moderatepolitics/comments/1p5ib02/exclusive_doge_doesnt_exist_with_eight_months/
24 Nov 2025 · It IS a political subreddit for moderately expressed opinions and civil discourse. If you are looking for civility, moderation and tolerance ...
- [REDDIT] https://www.reddit.com/r/epicsystems/comments/16yfv2a/if_youre_wondering_why_epic_is_coming_up_in/ [archived]
Even though Epic didn't do anything wrong, Epic benefited hugely from regulatory capture and enormous subsidization via the HITECH Act, and regulatory capture will prevent any new market entrants from disrupting the EMR market. MU and Promoting Interoperability prevent startups f…
- [REDDIT] https://www.reddit.com/r/antiwork/comments/13iunzw/repost_cuz_reddit_is_evil_a_warning_for_anyone/ [archived]
16 May 2023 · If you work at JPMorgan Chase & Co. or are thinking about working at JPMC, you need to know about their employee surveillance tool called WADU.
- [REDDIT] https://www.reddit.com/r/privacy/comments/a4zaay/epic_to_congress_require_algorithmic_transparency/
Tax prep companies shared private taxpayer data with Google and Meta for years, congressional probe finds cnn apnews theregister r/privacy telegraph.co.uk
- [REDDIT] https://www.reddit.com/r/privacy/comments/1bfrdx6/how_are_data_brokers_legal_if_anybody_could_buy/ [archived]
I was wondering how countries made being a data broker legal? They could sell your data to ANYONE regardless of what they are going to use it for - scammers, spammers etc. What are the justifications for that , it literary makes no sense to me. In any other business if you do thi…
CROSS-REFERENCE
- → SUPPORTS Government Purchase of Commercial Location Data: Warrantless Surveillance Via Data Broker Loophole — This dossier discusses advocacy for closing the 'data broker loophole' which is directly related to the practice of government agencies purchasing commercial location data without warrants.