No one, including government, can enumerate who holds and trades UK residents' personal data. There is no registration obligation for data brokers, in contrast to California's registry and Delete Act, and DSIT's call for evidence on data brokers and national security acknowledged the blind spot. ICO enforcement is rare and fragile; its 2020 Experian enforcement notice on offline data broking was largely overturned on appeal. Consumers have no practical way to discover or delete broker-held profiles, and ORG's campaigns are ad hoc.
Broker data feeds scams, discriminatory pricing and, in DSIT's own framing, hostile-state targeting. Individual rights are unusable against entities you cannot name. A register converts an invisible market into a governable one.
Statutory data broker registration administered by the Information Commission, with a one-stop deletion mechanism on the California Delete Act model. In the interim, a funded independent observatory could map the UK broker market.
// Build now: First artefact: independent UK data-broker observatory (fill's named interim); statutory register is the state-led end-state.
Nobody can enumerate the UK data brokers feeding scams and hostile-state targeting; California's registry-and-deletion model is copyable and the market is unowned.
claims & evidence · 4
// each factual claim in this entry, its source, and when it was last checked. Unresolved attributions are flagged rather than hidden. Challenge any of them on the thread below.
- 129.1verifiedchecked 2026-07-07There is no registration obligation for UK data brokers, in contrast to California's registry and Delete Act.Absence claim. The Data Protection Act 2018 contains no broker category or registration duty; add the California Privacy Protection Agency's registry page for the comparison at review.
- 129.2reportedchecked 2026-07-07DSIT ran a call for evidence on data brokers and national security that acknowledged the blind spot.Two trade-press accounts; swap in the gov.uk call-for-evidence page itself at review.
- 129.3verifiedchecked 2026-10-08The ICO's 2020 Experian enforcement notice on offline data broking was largely overturned on appeal.Experian v Information Commissioner [2023] UKFTT 132 (GRC): appeal allowed in large part, enforcement notice substituted and scaled down. The Commissioner's further appeal was dismissed by the Upper Tribunal in April 2024.
- 129.4verifiedchecked 2026-07-07Consumers have no practical way to discover or delete broker-held profiles.Absence claim. Subject access rights exist per controller, but without a register there is no way to enumerate the controllers; checked for any UK one-stop deletion service and found none.