Module 05 / 14 · Phase 2 — Architecture: law, technology, and the human cost
5. Data brokers and the invisible profile
This week in the arc
Coming from
Week 4 turned the problem structural: individual protection fails because privacy was never an individual-sized job. This week we meet the actual machinery that proves it.
Going to
Week 6 — the state. What happens when government stops needing a warrant because it can simply buy the profile this industry already built.
Core
Last week ended on a turn: the failure of every personal safeguard wasn’t your fault — you were handed an individual-sized tool for a structural-sized problem. This week we meet the structure itself, and it has a name and a business model.
There is an entire industry — Acxiom, Experian, LexisNexis, Epsilon, and dozens more — whose product is you. Not a service you use; a dossier about you, assembled from thousands of scattered sources: purchases, locations, public records, app data, the “anonymized” driving data from Week 3’s car. You have no account with these companies. You never agreed to anything. Most people have never heard their names. And yet they hold a profile of you that you cannot see, cannot correct, and mostly cannot delete.
The key idea this week is aggregation — and it matters for the whole rest of the course. No single fact in your profile is a secret. That you bought a lamp, drove to a clinic, searched a symptom, live on a certain street — each is trivial alone. The harm is in the assembly: innocuous pieces combine into a portrait that reveals things you never disclosed and never would. Hold onto that idea. Some later harms will look like aggregation and turn out to be something else entirely.
Cases — tagged by category, name the kind before you react
Brokers buy, combine, and sell detailed behavioral dossiers — financial records, health-adjacent inferences, purchase history, location, “personality segments” — for pennies per record, to retailers, insurers, political campaigns, and financial firms. You have no relationship with them, no easy view into what they hold, and no reliable way to correct or erase it. The portrait exists whether or not you ever consented to a single piece of it.
A layer of the industry harvests precise phone-location data through app SDKs — where you sleep, work, worship, seek care — and sells it. Regulators have moved against several for selling sensitive location data. Note where this points: some buyers are government agencies, who get the movements of millions without a warrant. Hold that thread — it’s next week.
Reading
Discussion
- You have no account with these companies and never agreed to anything. In what sense, if any, did you consent to the profile they hold?
- Every single fact in your broker profile is trivial on its own. So where, exactly, is the harm — and can you name it precisely?
- You can see and correct what your bank knows about you. You can't with a data broker. Does that difference matter morally, or just practically?