Profiled Without Consent: The Data Broker Economy Feeding Your Background Check

Somewhere in a data center you will never visit, a file exists with your name on it. It contains your current and former addresses, your estimated income, your purchase history, your political affiliation inferred from consumer behavior, court records from jurisdictions you may have lived in decades ago, and in some cases information that is simply wrong—attributed to you because a name or address matched imperfectly in a database join. That file is being sold. Repeatedly. To people making decisions about your employment, your housing, and your creditworthiness.

This is not a hypothetical scenario. It is the operational reality of the data broker industry, a sector that generates billions of dollars annually by treating personal information as a commodity—and one that operates with remarkably little regulatory oversight relative to the influence it exercises over ordinary American life.

What Data Brokers Actually Collect

The term "data broker" encompasses a wide range of business models, but the common thread is the aggregation of consumer information from disparate sources and its resale to third parties. The inputs to these systems are extensive.

Publicly available records—property ownership filings, voter registration rolls, court dockets, professional licensing databases, bankruptcy records—form the foundation. These are supplemented by commercially purchased data: loyalty program histories, retail transaction records, magazine subscription lists, warranty registration cards, and app-usage data sold by mobile platforms. Social media activity, where publicly accessible, is scraped and incorporated. Credit header data—name, address, and Social Security number fragments—flows from credit reporting infrastructure through complex licensing arrangements.

The result is a composite profile that is frequently more detailed than what the subject could reconstruct from memory. Companies like LexisNexis Risk Solutions, Equifax Workforce Solutions, First Advantage, Checkr, and Sterling are among the major players who package these profiles for sale to employers and property managers. Smaller brokers—Spokeo, Whitepages, BeenVerified, Intelius—sell consumer-facing versions of similar data.

The Accuracy Problem and Its Real-World Consequences

If these profiles were reliably accurate, the privacy concerns would be significant but at least bounded. The deeper problem is that they frequently are not.

Data aggregated from multiple sources and matched by probabilistic algorithms—rather than verified identifiers—is inherently prone to error. A common surname, a shared address history, or a transposition in a date of birth can result in one person's criminal record being attached to another person's profile. These errors are not rare edge cases. The Federal Trade Commission has documented systematic inaccuracy in background screening reports, and a 2012 FTC study found that one in four consumers identified errors in their credit reports significant enough to affect their scores—a problem that has not been resolved in the intervening decade.

For a job applicant, a false criminal record appearing in a background check can end a hiring process before any conversation takes place. Under the Fair Credit Reporting Act (FCRA), employers who use consumer reports for hiring decisions are required to notify applicants and provide an opportunity to dispute inaccurate information before taking adverse action. In practice, these procedural protections are frequently administered poorly, and many applicants never learn the specific content of the report that disqualified them.

Your Legal Rights Under the FCRA

The Fair Credit Reporting Act is the primary federal statute governing consumer reporting agencies, and it provides a set of rights that most Americans are unaware they possess.

You are entitled to a free copy of any consumer report used against you in an employment or housing decision, and you must be notified when such a report has been requested. You have the right to dispute inaccurate information directly with the consumer reporting agency, which is then obligated to investigate within thirty days and correct or delete information it cannot verify.

If you believe a background check company has violated your FCRA rights—by failing to provide pre-adverse action notice, by reporting inaccurate information after a dispute, or by selling your data without permissible purpose—you may file a complaint with the Consumer Financial Protection Bureau at consumerfinance.gov/complaint or pursue a civil claim. FCRA violations can carry statutory damages.

Importantly, the FCRA applies specifically to companies whose reports are used for employment, housing, and credit decisions. It does not govern all data brokers—those selling marketing data or people-search profiles operate under a different, substantially weaker legal framework.

Accessing Your Own Dossier

The process of discovering what has been compiled about you is tedious but worthwhile. Several practical steps exist.

Request your file from major screening companies. First Advantage, Sterling, Checkr, HireRight, and similar employment screening firms are required under the FCRA to provide you a copy of your file upon request. Their websites typically include a consumer disclosure request process. Submit requests to all major providers, not just the one you believe a prospective employer used.

Check people-search sites. Sites like Spokeo, Whitepages, BeenVerified, and MyLife aggregate and display consumer profiles. Visit each site and search your own name to review what is publicly visible. Each of these platforms maintains an opt-out mechanism—typically buried in their privacy policy pages—that allows removal requests. The process must be repeated periodically, as data frequently reappears after removal.

Use a data broker opt-out aggregator. Services such as DeleteMe (a paid service) or the free resources maintained by the Privacy Rights Clearinghouse at privacyrights.org provide structured guides to opt-out processes across dozens of data broker platforms. Completing these opt-outs requires time and persistence, but meaningfully reduces your exposure.

Review your specialty consumer reports. Beyond credit reports, specialty agencies compile records related to insurance claims (CLUE reports from LexisNexis), tenant history (Experian RentBureau, TransUnion SmartMove), and employment history verification. You are entitled to a free annual report from each. AnnualCreditReport.com is the federally mandated portal for the three major credit bureaus; specialty reports must be requested directly from each agency.

The Regulatory Landscape and What Is Changing

Federal regulation of data brokers beyond the FCRA context remains limited. The United States does not yet have a comprehensive federal privacy law comparable to the European Union's General Data Protection Regulation, leaving most data broker activity governed by a patchwork of state statutes.

California's Delete Act, signed in 2023, represents the most aggressive state-level intervention to date, requiring data brokers to register with a state agency and honor deletion requests through a centralized mechanism by 2026. Texas, Virginia, and Colorado have enacted broader consumer privacy laws that include data broker provisions, though enforcement mechanisms vary considerably.

For now, the most effective protection available to most Americans is a combination of proactive opt-out requests, regular self-monitoring of background check files, and assertive use of FCRA dispute rights when errors are found. The industry profits from the assumption that consumers will not bother. Disproving that assumption, one opt-out request at a time, is among the most consequential privacy actions an individual can take.