The Consumer Financial Protection Bureau (CFPB) has taken notice, and their proposed regulations seek to hold data brokers accountable by subjecting them to the Fair Credit Reporting Act (FCRA). This move transcends mere privacy concerns—it is a matter of national security.
For instance, data brokers can facilitate targeting individuals by allowing entities to purchase lists that match multiple categories, such as “Intelligence and Counterterrorism” combined with descriptors like “substance abuse,” “heavy drinker,” or even “behind on bills.”
In other contexts, entities can buy records for pennies per person, leveraging relatively small investments into mass data collection. The concern is that adversaries, including countries like China, can use this data to identify targets for surveillance and other purposes. The government is increasingly worried about foreign governments’ access to Americans’ data.
The Consumer Financial Protection Bureau intends to propose new regulations that will compel data brokers to follow the Fair Credit Reporting Act. Earlier this month, CFPB Director Rohit Chopra stated that the agency is looking into rules to "ensure greater accountability" for companies that buy and sell consumer data, in line with an executive order signed by President Joe Biden in late February.
Chopra added that the agency is examining suggestions that would classify data brokers who sell specific categories of data as "consumer reporting agencies," requiring them to comply with the Fair Credit Reporting Act (FCRA). The statute prohibits the sharing of certain types of data with companies unless they have a legally defined purpose.
The CFBP considers the purchase and sale of consumer data to be a national security issue rather than a privacy concern. Chopra cited three large data breaches—the 2015 Anthem leak, the 2017 Equifax hack, and the 2018 Marriott breach—as instances of foreign enemies illegally collecting Americans' personal information.
He said, "When Americans' health information, financial information, and even their travel whereabouts can be assembled into detailed dossiers, it's no surprise that this raises risks when it comes to safety and security,". However, the attention on high-profile intrusions hides a more widespread, entirely legal phenomenon: data brokers' capacity to sell precise personal information to anyone willing to pay for it.
The government is increasingly concerned about foreign governments gaining access to Americans' data. In March, the House passed legislation that would bar data brokers from selling Americans' personally identifiable information to "any entity controlled by a foreign adversary."
According to the Protecting Americans' Data from Foreign Adversaries Act, data brokers would be facing fines from the Federal Trade Commission if they sold sensitive information — such as location or health data — to any person or business situated in a few countries. The Senate has yet to vote on the legislation.
US government agencies also depend on data brokers to keep surveillance on Americans. In 2022, the American Civil Liberties Union released a series of files exposing how the DHS (Department of Homeland Security) exploited location data to track the movement of millions of cell phones — and the users who own them — across the United States.
Fortunately, there are steps you can take to protect your personal financial information from data brokers.
Here are some tips to help you fight back:
1. Monitor your credit reports: Regularly check your credit reports from the three major credit bureaus (Equifax, Experian, and TransUnion) to ensure that there are no unauthorized accounts or inquiries. If you find any suspicious activity, report it immediately.
2. Freeze your credit: Consider placing a security freeze on your credit reports. This will prevent anyone from accessing your credit report without your permission, making it more difficult for identity thieves to open new accounts in your name.
3. Opt-out of data sharing: Many companies share your personal information with third parties for marketing purposes. You can opt-out of this by contacting the company directly and requesting that they stop sharing your information.
4. Use strong passwords: Use strong, unique passwords for all of your online accounts and enable two-factor authentication whenever possible. This will make it more difficult for hackers to access your accounts and steal your personal information.
5. Be cautious when sharing personal information: Be cautious when sharing personal information online or over the phone. Only provide this information when it is absolutely necessary and when you are sure that the person or company requesting it is legitimate.
Protecting your personal financial information from data brokers is important for preventing identity theft and other fraudulent activities.
By following these tips, you can take control of your personal information and keep it safe from prying eyes.