GUIDA della Società

Data Brokers and AI Profiling

Data brokers assemble personal information from public records, purchases, apps, websites, and other sources, then may use statistical models to build or sell profiles.

  • 3 minuti di lettura
  • Ultimo aggiornamento
In questa pagina3 minuti di lettura
  1. Panoramica
  2. Immersione profonda
  3. Impatto strategico
  4. The Future of Data Brokers and AI Profiling
  5. Implementazione nel mondo reale
  6. Rischi e guardrail
  7. Tabella di marcia per l'implementazione
  8. Continua a esplorare
  9. Domande frequenti

Panoramica

These profiles can infer interests or life events without a person directly providing them. The risks and consumer rights depend on the jurisdiction, data type, use, and applicable privacy or consumer-protection laws.

Immersione profonda

A data broker collects or derives information about people, often combining public records, commercial transactions, apps, websites, and other datasets. Brokers may sell records or inferred audience segments to marketers, campaigns, insurers, employers, lenders, or people-search services. A segment may describe an interest or predict an event; AI can scale these inferences, while conventional matching also remains common. The information used to build a profile may be incomplete, stale, or linked to the wrong person. A prediction such as “likely new parent” is an inference, not a fact about an individual. Profiles can still affect what advertisements, offers, prices, or opportunities a person receives. Whether a particular use is lawful depends on sector-specific and jurisdiction-specific rules; there is no single U.S. law that gives every person the same broker rights. California’s Delete Act is one example of a state intervention. The California Privacy Protection Agency launched DROP on January 1, 2026; consumers can submit one request to registered brokers, and brokers began processing requests August 1, 2026, accessing the system at least every 45 days. Deletion requests are subject to legal exceptions, and the platform covers registered brokers rather than every company holding data. Privacy laws can cover inferences as well as directly supplied details. California’s CCPA includes certain inferences in personal information, and its sensitive-information rules cover inferences used to create profiles reflecting specified sensitive categories. The EU GDPR also gives special protection to specified categories of personal data. The exact definition, legal basis, and consumer rights differ. A broker profile may fall under one rule for collection and a different rule when used for credit, employment, housing, or advertising. Consumers can inspect privacy notices, use opt-out or deletion tools where available, correct source records, and limit precise-location or ad tracking. Businesses should document sources, inference logic, downstream sharing, and rights processes.

Impatto strategico

Rischio e sicurezza

I danni catastrofici e quotidiani dell’IA dipendono entrambi da chi comprende i rischi e da chi può agire.

Decisioni più chiare

L’alfabetizzazione pubblica e professionale determina la possibilità politica di una forte politica di sicurezza.

Tagliare il clamore

Spiegazioni chiare riducono la cattura da parte di montature pubblicitarie, PR di laboratorio e vaghi teatrini etici.

The Future of Data Brokers and AI Profiling

California’s DROP process is operational for registered brokers, but statutory exceptions remain and other jurisdictions use different rights and definitions. A consumer’s available remedy therefore depends on where they live, which entity holds the profile, and how it is used. New data sources can also support sensitive predictions that a company never collected directly. Before directing someone to a request mechanism, check the current agency registry and governing law. For product teams, review notices and downstream sharing when a new inference feature changes the profile’s purpose. Registry and platform procedures may be updated, so cite the date checked.

Implementazione nel mondo reale

A retailer matches loyalty records with broker data to estimate household interests and choose which customers receive a promotion.

A campaign uses modeled scores to prioritize outreach, while the data source and prediction remain invisible to voters.

A people-search profile combines addresses and relatives; an advocate helps a client use available removal and safety procedures.

A California resident submits one deletion request through the state’s DROP platform, which registered brokers began processing August 1, 2026 subject to statutory exceptions.

Rischi e guardrail

  • Trattare il rischio esistenziale come fantascienza mentre le capacità si aggravano.

  • Confondere la sicurezza del prodotto superficiale con l'allineamento in condizioni di elevata autonomia.

  • Lasciando il pubblico non inglese e non esperto solo con fonti di bassa qualità.

Tabella di marcia per l'implementazione

  1. Separare i rischi di danni al prodotto, uso improprio e perdita di controllo/disallineamento.

  2. Chiedi quali prove cambierebbero la tua opinione sulle tempistiche e sulla gravità.

  3. Preferire fonti primarie e valutazioni concrete alle affermazioni di marketing.

  4. Identifica un percorso d’azione: carriera, politica, finanziamenti o competenze, non solo consapevolezza.

Continua a esplorare

Free newsletter

Get the daily AI briefing

Three verified AI stories every weekday morning, written in plain English. Free forever, no ads.

One email each weekday. Unsubscribe in one click. We never sell or share your address.

Test yourself

Take the Data Brokers and AI Profiling quiz

Instant feedback on every answer, and a shareable certificate with a verifiable ID once you pass a course.

Inizia il quiz

Support free AI education. AI Understanding is a 501(c)(3) nonprofit — no ads, no paywall, ever. Make a donation

Domande frequenti

What is Data Brokers and AI Profiling?

Data brokers assemble personal information from public records, purchases, apps, websites, and other sources, then may use statistical models to build or sell profiles. These profiles can infer interests or life events without a person directly providing them. The risks and consumer rights depend on the jurisdiction, data type, use, and applicable privacy or consumer-protection laws.

What can a data broker sell besides directly collected records?

Brokers may sell profiles, audience segments, or predictions built from multiple sources.

Is a profile label such as “likely new parent” a verified fact?

The guide distinguishes a prediction from a known fact about an individual.

When did California residents gain access to the DROP request platform?

The California Privacy Protection Agency launched DROP for consumers on January 1, 2026.

When did registered brokers begin mandatory DROP processing?

The Agency says data brokers must begin accessing and processing requests August 1, 2026.

How often must data brokers access DROP to retrieve requests?

The Delete Act requires access at least once every 45 days beginning August 1, 2026.