What is a Data Broker and Why Should Australians Care?

Most Australians have never heard of a data broker. That is exactly why they are so effective.

The short version

A data broker is a company that collects your personal information — your name, address, phone number, employment history, financial behaviour, health information, political leanings, relationships — and sells it to anyone willing to pay. Advertisers. Insurance companies. Employers. Lawyers. And people you have never met.

You did not consent to this. You were not asked. It is happening right now.

Where does the data come from?

Data brokers collect information from dozens of sources simultaneously:

Public records — electoral rolls, property records, court records, ASIC filings
Social media profiles — public posts, check-ins, tagged photos
Loyalty programs — supermarket cards, frequent flyer points, retail memberships
Data breaches — information stolen from other companies and sold
Purchase history — what you buy online and in store
Location data — from apps on your phone that track your movements
Search history — sold by some browsers and internet providers

Is it legal in Australia?

Largely, yes. The Australian Privacy Act 1988 sets out rules for how personal information can be handled, but data brokers have operated in a grey zone for years. The Privacy Act reforms currently before parliament will tighten some of these rules, but enforcement remains inconsistent and opt-out processes are deliberately difficult.

The short answer: it is legal enough that hundreds of companies do it openly. It is harmful enough that removing your data is worth doing.

What can someone actually find out about you?

More than most people realise. A basic search on common data broker platforms can return your full name, current and previous addresses, phone numbers, email addresses, estimated age, family member names, and in some cases estimated income range and property ownership details.

For people in high-profile roles — executives, lawyers, healthcare workers, teachers, public figures — the exposure is significantly higher. For people leaving difficult personal situations, it can be dangerous.

What can you do about it?

Three options, in order of effort:

Do it yourself

Contact each data broker individually and submit opt-out requests. Most have a process, but it is deliberately time-consuming. Expect to spend 4-8 hours and repeat the process every few months as data reappears.

Use our DIY guide ($75)

We have mapped every opt-out process for the 50+ most common platforms operating in Australia. You still do the work, but you do not have to find the forms yourself.

Let us do it for you ($349+)

We submit the requests on your behalf, follow up when brokers do not comply, and confirm every removal in writing. Most people find this worth it for the time saved alone.