HIPAA (health information)29 4.8%29 of 603 registered data brokers (4.8%)
Gramm-Leach-Bliley Act (financial data)20 3.3%20 of 603 registered data brokers (3.3%)
Fair Credit Reporting Act (consumer reports)17 2.8%17 of 603 registered data brokers (2.8%)
California medical privacy law (CMIA)6 1%6 of 603 registered data brokers (1%)
California insurance privacy law (IIPPA)1 0.2%1 of 603 registered data brokers (0.2%)
Chart: DeepSearch, CC BY 4.0. Data: California Privacy Protection Agency, registry file published July 29, 2026.
Key findings
53 brokers say at least one of the five laws covers some of their data.
17 say the Fair Credit Reporting Act covers part of their business, the law that governs background checks used for jobs, housing and credit.
The data
Which other privacy laws cover California's data brokers?
Category
Brokers
Share
HIPAA (health information)
29
4.8%
Gramm-Leach-Bliley Act (financial data)
20
3.3%
Fair Credit Reporting Act (consumer reports)
17
2.8%
California medical privacy law (CMIA)
6
1%
California insurance privacy law (IIPPA)
1
0.2%
Shares are of 603 registered data brokers.
How we made this chart
Data brokers that operated in California in 2025 had to register with the California Privacy Protection Agency (CalPrivacy) in 2026. The registration form asks each one the same questions, and CalPrivacy publishes every answer.
The form asks whether the broker or a subsidiary is regulated by each of these laws, and for what share of its data activities. We counted the registrations that answered yes.
Limits to keep in mind:
A yes means at least some of the broker's data falls under that law. Many of the brokers that answered yes put the covered share below 10%.
Every figure is self-reported by the broker on its registration. CalPrivacy publishes the answers as filed, and DeepSearch has not audited them.
Affiliated companies often register separately, so one corporate group can appear several times.
Embed this chart
Interactive
<iframe src="https://deepsearch.app/data/data-brokers-sector-privacy-laws/embed" title="Which other privacy laws cover California's data brokers?" width="100%" height="360" style="border:0;max-width:760px" loading="lazy"></iframe>
<p>Chart: <a href="https://deepsearch.app/data/data-brokers-sector-privacy-laws">DeepSearch</a>. Source: 2026 California Data Broker Registry.</p>
Image
<figure style="margin:0">
<a href="https://deepsearch.app/data/data-brokers-sector-privacy-laws"><img src="https://deepsearch.app/data/data-brokers-sector-privacy-laws/chart.png" alt="Which other privacy laws cover California's data brokers? 550 of the 603 registered data brokers (91%) say no part of their business is regulated by any of five federal and California sector privacy laws." width="1200" height="675" style="max-width:100%;height:auto" loading="lazy"></a>
<figcaption>Chart: <a href="https://deepsearch.app/data/data-brokers-sector-privacy-laws">DeepSearch</a>. Source: 2026 California Data Broker Registry.</figcaption>
</figure>
Free to use under CC BY 4.0. Keep the credit link with the chart.
Cite this chart
DeepSearch. (October 15, 2026). Which other privacy laws cover California's data brokers? DeepSearch Data. https://deepsearch.app/data/data-brokers-sector-privacy-laws
115 of the 603 registered data brokers (19%) say they collect people's precise geolocation, the most common of the ten sensitive categories the registry asks about.
55 registered data brokers sold or shared people's data with the federal government in the year before registering, and 32 with developers of generative AI systems or models.