Data trafficking is a legal industry.
You are the inventory.

Somewhere right now, a database row with your name on it is being sold. It has your home address, the addresses before that, your phone number, your age, and a list of your relatives. It was assembled without asking you, from county records, voter rolls, and commercial data feeds. It is for sale to anyone with a search bar.

We call this what it is: data trafficking — the industrial-scale movement and sale of people's identities, without meaningful consent, for profit. It is not a breach. Nothing was hacked. It is a business model, and in the United States it operates in the open: California's public registry alone lists more than 500 registered data brokers, and registration is the floor, not the ceiling.

The harm is not abstract. People-search listings are the first stop for stalkers locating a target, for scammers building a convincing impersonation, for doxxers publishing a home address next to a family member's name. For most people it is a quiet risk. For someone leaving an abusive relationship, a teacher, a judge, a nurse, a journalist — it is the difference between being findable in ten seconds and not.

Here is the part the industry prefers you not dwell on: you already have the right to be removed. CCPA and CPRA in California, GDPR in Europe, and a growing list of state laws oblige brokers to delete your data on request. Starting August 1, 2026, California's DROP portal lets residents file one request that covers every registered broker in the state at once. The rights exist. What doesn't exist is the easy button — every broker has a different process, and many make it deliberately tedious.

That tedium is the entire business model of the removal industry. It is also fixable.