What happened
EPIC highlights that data brokers collect and sell personal information to major companies such as Disney, General Motors, insurers and banks. The article notes that brokers infer additional characteristics like finance, health, demographics and religion, and that the industry is largely underregulated with little consumer consent. Sherman emphasizes that most people are unaware of these sales and have not given consent.
Why it matters for trust and compliance
- Its status is published. It is enacted but may not be in force yet. Check the effective date before planning around it.
- The piece underscores the privacy risks of an underregulated data‑broker market that trades personal data without meaningful consent.
Who is affected
technology automotive insurance media controller processor Disney General Motors insurers banks data broker industry
Recommended actions
- Review consent, cookie and tracking practices against the requirement.
- Check that privacy notices describe the practices this addresses.
- Inventory AI or automated decision systems in scope and their assessments.
- Confirm handling of sensitive data categories meets the stricter rules.