What the UC Irvine Study Reveals About Data Brokers and Privacy

A recent study from UC Irvine highlights just how broken the data broker ecosystem really is.

A PhD student submitted data access requests to all 543 data brokers publicly registered in California. In other words, she attempted to exercise her basic rights under the California Consumer Privacy Act (CCPA).

The results were alarming.

"Our findings reveal rampant non-compliance and lack of standardization of the data access request process."

The study uncovered major gaps in how data brokers respond to consumer rights requests:

• 43% of companies never responded at all
• Only 52% responded on time
• 8 websites were completely inaccessible
• 7 had no privacy policy

And that was only the start. Researchers also documented inconsistent verification processes, confusing forms, and cases where companies asked consumers for more personal data than they claimed to hold in the first place.

Read the full UC Irvine study for complete methodology and findings.

Many of the companies studied are deeply connected to healthcare advertising.

• Some sell raw data to health audience vendors
• Some sell health audience segments directly
• Some operate as ad tech intermediaries delivering ads to consumers

If these companies cannot reliably comply with basic privacy rights, it raises serious questions about the compliance of the audiences built on their data.

The study paints a picture of a privacy era that is messy, burdensome, and often unaccountable. Consumers are left without clear pathways to exercise their rights. Marketers are left exposed to compliance risk when relying on opaque data broker ecosystems.

Healthcare marketers should take this study as a warning. Transparency and accountability are still the exception, not the rule. If you are working with vendors who rely on data brokers, ask the hard questions about compliance.

Because regulators are already paying attention. And if your vendors are failing the basics, it is your campaigns and your brand that could be on the line.