A data broker is someone who collects information on people. Exactly where does a data broker get that information and what do they with the information once they have it? The easy answer is they get this information from a variety of sources— both public and nonpublic—and resell it to other companies.
The FTC is requiring nine data brokerage companies to explain how they get this information and what they do with it. The nine companies that the FTC is requiring answers from are:
- Acxiom,
- Corelogic,
- Datalogix,
- eBureau,
- ID Analytics,
- Intelius,
- Peekyou,
- Rapleaf, and
- Recorded Future
In the US, information that is collected and used for credit, employment, insurance, or housing is protected by the Fair Credit Reporting Act (also known as FCRA). Medical information is protected by the Health Information Portability and accountability Act (HIPAA). There are no laws that govern the privacy of other types of data that can be gleaned from public records and purchased from other companies. The FTC states that the collected information is used to benefit consumers in many ways, such as fraud protection, and that this collected information also enables companies to better market their products and services.
But what about privacy?
The FTC wants data brokers to give consumers more transparency, in other words:
- What information do data brokers collect?
- Where do data brokers collect it from?
- Who has access to the information collected? Where is the information stored and how is it protected?
- How can consumers see what information has been collected on themselves?
- If the information the data broker has collected is incorrect, how does a consumer fix it?
- Can consumers opt out of having their personal information sold by a data broker?
- What tools exist to help consumers?
You can find more information about this topic at the FTC website: http://ftc.gov/opa/2012/12/databrokers.shtm
In March, 2012, the FTC published a guide for businesses and policymakers entitled “Protecting Consumer Privacy in an Era of Rapid Change.” To access this guide, click this link: http://ftc.gov/os/2012/03/120326privacyreport.pdf
Intentional Privacy 