The state of enforcement: Part III — Data brokers and sensitive data
A new analysis from the IAPP examines how regulators are approaching enforcement against data brokers, focusing specifically on the handling of sensitive personal information. The report maps the current enforcement landscape as state and federal authorities increasingly scrutinize broker practices.
Why this matters: Data brokers are one of the least visible parts of the privacy problem. Most people have never heard of the companies selling their location history, health signals, financial behavior, or daily routines. Sensitive data is the highest-stakes category — the kind that can affect someone's job, insurance, safety, or relationships. Enforcement is finally catching up, but slowly. The practical question is whether regulators are moving fast enough to matter, and whether penalties are steep enough to change the economics of a business built on selling what people never agreed to share.
Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.