Privacy Research Resources
Data broker registries, enforcement databases, and organizations working on privacy research and consumer protection.
US State Data Broker Registries
Five states currently require data brokers to register. These registries provide transparency into the data broker ecosystem.
California: CPPA Data Broker Registry
Most comprehensive US registry. Requires detailed disclosure of data types collected, sharing practices, and CCPA request metrics. CSV downloads available.
Vermont: Secretary of State Data Broker Registry
First US state to require data broker registration (2018). Annual registration with basic company information and data practices.
Oregon: Division of Financial Regulation Data Broker Registry
Registry launched 2024 requiring registration and disclosure of data collection practices.
Texas: Secretary of State Data Broker Registry
Texas data broker registration requirement effective September 2023.
Connecticut: Department of Consumer Protection Data Broker Registry
Connecticut enacted data broker registration in 2025. Registration due by January 31, 2026 with a $200 fee. Registry list not yet publicly available.
Enforcement Data Sources
Where to find comprehensive privacy enforcement data for research.
CMS GDPR Enforcement Tracker
Most comprehensive GDPR fines database. 2,245+ documented fines totaling EUR 5.65 billion. Maintained by CMS law firm.
FTC Privacy & Security Enforcement
Official FTC enforcement actions page. 97+ privacy cases and 89+ data security cases since 1999.
EDPB GDPR Enforcement
European Data Protection Board official enforcement documents and guidance.
IAPP Enforcement Trends
International Association of Privacy Professionals analysis of FTC enforcement patterns.
Privacy Rights Clearinghouse
Unified database of 750+ US data brokers cross-referenced from all state registries. Creative Commons licensed for researchers.
Privacy Research Allies
Organizations doing important work in privacy research and consumer protection.
AppMicroscope.org (Internet Safety Labs)
Product safety ratings for apps and connected products. Evaluates privacy, security, and safety practices of consumer technology. A key ally in product privacy research.
VisitElectronic Frontier Foundation
Digital privacy advocacy, research, and legal action. Publishes reports on data broker non-compliance.
VisitIAPP — International Association of Privacy Professionals
Largest global information privacy community. Research, certifications, and policy analysis.
Visit