--- title: "New Privacy Perspectives Episode: Data Broker Laws Are Expanding. Is Your Business in Scope?" date: 2026-07-30T15:00:00-04:00 author: "LLiu@kelleydrye.com" canonical_url: "https://www.kelleydrye.com/viewpoints/blogs/ad-law-access/new-privacy-perspectives-episode-data-broker-laws-are-expanding-is-your-business-in-scope" section: Blog Posts --- # New Privacy Perspectives Episode: Data Broker Laws Are Expanding. Is Your Business in Scope? July 30, 2026 Data broker laws are expanding, and their reach may extend well beyond companies that traditionally think of themselves as data brokers. In the latest [episode](https://www.kelleydrye.com/viewpoints/podcasts/ad-law-access/privacy-perspectives-data-broker-laws-are-expanding-is-your-business-in-scope) of Privacy Perspectives, [Alex Schneider](https://www.kelleydrye.com/people/alexander-i-schneider) is joined by [Aaron Burstein](https://www.kelleydrye.com/people/aaron-j-burstein) and [Céline Guillou](https://www.kelleydrye.com/people/c%C3%A9line-guillou) to discuss the growing patchwork of state registration laws, California’s DROP deletion mechanism, and the questions businesses should be asking regarding when they are subject to data broker registration obligations. The conversation begins with New Jersey’s recently enacted data broker law, which moved from introduction to enactment in only two days. The law includes annual registration fees that could reach $1.5 million for some businesses, as well as a ban on the sale of sensitive data that took effect immediately. The law also bans all sales of New Jersey residents’ sensitive data; this ban applies to all controllers, not just data brokers, and went into effect immediately on June 30. Although data broker registration is not expected to begin until spring 2027, and the law could be amended before then, companies have already begun to assess whether their activities fall within the law’s scope. That analysis may not be straightforward. Data broker status often depends on specific data flows rather than a company’s overall relationship with consumers. A retailer, for example, may collect information directly from its customers while also obtaining additional information from a third-party source. If the retailer later sells or licenses that enriched data, it may be engaging in activity covered by a data broker registration laws despite having a direct relationship with the consumer. The group also discusses how these requirements may apply to advertising technology. Definitions of ​“sale,” ​“sharing,” and ​“direct relationship” vary across states, and regulators have not always provided clear guidance on how those terms apply to particular technologies. California’s Delete Request and Opt-out Platform, known as DROP, adds another operational challenge. The system allows California residents to submit one deletion request that is transmitted to registered data brokers. Compliance requires businesses to identify relevant records, process requests, communicate deletions, and address data held by service providers and other recipients. Companies that do not have a detailed understanding of their data flows may find those requirements difficult to implement. The episode also examines New Jersey’s new ​“data collector” category, which could require certain businesses that obtain information directly from consumers and provide it to data brokers to register with the state. This approach could bring retailers and other first-party businesses into the fold even when data brokerage is not their primary business. The discussion concludes with practical guidance for companies assessing these laws. Businesses should review their data sources and destinations, evaluate registration requirements consistently across jurisdictions, and avoid assuming that a first-party customer relationship places every data flow outside the definition of data brokerage. **One Feed, Multiple Formats** Privacy Perspectives episodes appear on the same Ad Law Access feed hosted by Simone Roach, so if you’re already subscribed, you’ll get these automatically. If not, subscribe now on your preferred podcast platform. We’ve got more podcast conversations and formats planned for 2026. One subscription gets you everything. Find the episode and more [here](https://www.kelleydrye.com/viewpoints/podcasts/ad-law-access). - Share this entry - - - - - [ View entry pdf ](https://s3.amazonaws.com/cdn.kelleydrye.com/content/uploads/pdf-snapshots/new-privacy-perspectives-episode-data-broker-laws-are-expanding-is-your-business-in-scope-20260730153654.pdf) ### Search Blog ### Subscribe ### Explore Topics - [Privacy and Information Security](https://www.kelleydrye.com/viewpoints/blogs/ad-law-access/privacy-and-information-security) ### Related Services - [Privacy and Information Security](https://www.kelleydrye.com/practices/privacy-and-information-security) - [Advertising and Marketing](https://www.kelleydrye.com/practices/advertising-and-marketing)