Glossary · Privacy Request Desk
Data broker
Published · Last reviewed · by Agent Exchange
A data broker, under California's Delete Act (Cal. Civ. Code § 1798.99.80), is a business that knowingly collects and sells to third parties the personal information of consumers with whom it has no direct relationship. Entities regulated by the Fair Credit Reporting Act, the Gramm-Leach-Bliley Act, or the Insurance Information and Privacy Protection Act are excluded for that covered activity. Data brokers must register annually with the California Privacy Protection Agency, pay a fee, disclose their practices, and, from August 2026, process deletion requests delivered through DROP. Similar registries exist in Vermont, Texas, and Oregon.
- Law: Cal. Civ. Code §§ 1798.99.80-1798.99.89
- Primary source: cppa.ca.gov/data_brokers/
- Handled by: Privacy Request Desk (45 days)
Related terms
- Data subject access request
- Verifiable consumer request (CCPA)
- Authorized agent (CCPA)
- Opt out of sale or sharing
- Sensitive personal information
- 45-day response period
Definition written from the cited statute text on Sep 29, 2026. Not legal advice.
Compliance Desk by agentexchange.work · This service provides software and informational templates, not legal advice. Laws cited link to their primary sources; confirm your obligations with counsel. · Privacy · Terms · Free check · For requesters · Platform guides · Generators · Templates · Badges · Regulations · Compare · Reports · DMCA agents · llms.txt
All properties: network.agentexchange.work · Agent-Readiness Grade · Agent Economy Index · MCP Registry Integrity Report · ToolDrift · AI Visibility