Text modules don’t have to be simple, you can add personality to them without this being a problem.
All blocks are customizable, add, change and choose the best for your brand.
Data Broker Registration Services
Comprehensive support for data brokers across the U.S.
VeraSafe helps organizations of all sizes that collect, sell, or otherwise derive value from consumer data comply with state-specific data broker registration requirements. Our services cover California, Texas, Vermont, Oregon, and emerging state regulations.
Trusted by leading organizations worldwide:
Data Broker Registration Services
Our U.S.-based privacy attorneys and compliance professionals provide hands-on support for all aspects of registration and ongoing obligations. Services include:
Applicability Assessment
VeraSafe conducts a detailed assessment to determine whether your organization qualifies as a data broker and identifies applicable registration and compliance obligations under state laws.
State Registration Support
We prepare and submit accurate annual data broker registrations and renewals to meet the requirements of California, Texas, Vermont, Oregon, and other applicable jurisdictions.
Governance and Documentation
We support the development and maintenance of privacy policies, data inventories, and related documentation to support compliance with U.S. state data broker laws.
Data Mapping
We help identify and document personal data collection, sale, and sharing activities to support registration disclosures, reporting, and audit readiness.
Consumer Request Management
We assist with managing consumer deletion and opt-out requests, including the operational processing of DROP requests under California’s Delete Act.
Audit Readiness
We help prepare compliance documentation and support submissions for regulatory reviews and mandatory audits, including the independent audit requirements under the California Delete Act.
Staff Training
To meet state-specific obligations such as those under Texas law, we provide staff training on data brokerage practices, privacy obligations, and security requirements.
Security Program Support
VeraSafe helps organizations develop and maintain a comprehensive information security program, including safeguards, risk assessments, and oversight of third-party service providers, to meet requirements in states such as Texas and others with similar obligations.
Regulatory Liaison
VeraSafe can act as your designated point of contact with state regulatory authorities, where applicable, and manage all required disclosures across multiple jurisdictions.
Schedule a Free Consultation
We'd love to learn more about your compliance needs. In this session, a member of our team will tell you more about our program, give you an opportunity to ask questions, and gather any information needed to provide you with a proposal.

The awesome title
VeraSafe’s Data Broker Registration Process
Data broker registration is not a one-time filing. VeraSafe supports organizations through a continuous compliance process that aligns registration, handling of consumer requests, and audit readiness across jurisdictions.
.png?width=1000&height=600&name=data-broker-registeration-process%20(4).png)
U.S. States That Require Data Broker Registration
The following four states have enacted data broker statutes with specific registration and disclosure requirements:
- The California Delete Act requires data brokers to annually register with the California Privacy Protection Agency (CalPrivacy) and to participate in the Delete Request and Opt-Out Platform (DROP).
- The Texas Data Broker Act requires data brokers to register annually with the Texas Secretary of State before engaging in their brokerage activities. Brokers must disclose that they are a data broker on their websites or apps, implement a comprehensive information security program to safeguard personal data, and comply with specific training and security requirements.
- The Vermont Data Broker Regulation requires annual registration with the Vermont Secretary of State, disclosure of opt-out procedures, statements about purchaser credentialing, and reporting of security incidents.
- Oregon Data Broker Registration Law requires data brokers to register annually with the Oregon Department of Consumer and Business Services before collecting, selling, or licensing brokered personal data about Oregon residents.

Why Choose VeraSafe?
End-to-End Support
From registration preparation to ongoing compliance monitoring, VeraSafe guides your team through every stage of data broker obligations.
Trusted U.S. Privacy Advisor
With over 16 years of experience, VeraSafe advises organizations of all sizes on federal and state-specific privacy laws.
Seamless Integration
We integrate registration requirements into your existing workflows, privacy processes, and reporting systems for operational efficiency.
Ongoing Support
We provide continuous guidance as regulations evolve, helping your team maintain compliance, manage risks, and stay prepared for audits.
Experienced Team
Our 65+ team members include American and European attorneys, compliance professionals, and IT security experts with in-depth knowledge of U.S. privacy laws. Our ranks include former regulators and Vault Law 100 attorneys, Certified Information Privacy Professionals (CIPP), Certified Information Systems Auditors (CISA), and alumni of Big 4 professional service firms.

Jim Cormier
Sr. VP and Head of Professional Services
CIPP/E, CIPM, FIP

Kellie Isabel Fernández Del Campo Aguiló
Senior Privacy Advisor
CIPP/E, CIPP/US, CIPM, CIPT, FIP

Joe Hansen
Partner
CIPP/US, CIPP/E

Zia Maharaj
Partner
CIPP/E, CIPP/US, CIPM, FIP, GCP for Clinical Trials (ICH Focus)
Frequently Asked Questions
Who must register as a data broker?
Businesses that collect, sell, or share personal information about consumers with whom they do not have a direct relationship must register as data brokers in states that have enacted data broker laws, such as California, Texas, Vermont, and Oregon.
What are the deadlines for registration?
Deadlines vary by state. In California, data brokers must register annually with the California Privacy Protection Agency by January 31. Other states such as Texas, Vermont, and Oregon also require annual registration, generally tied to calendar year renewal cycles.
What are the consequences of failing to register?
Consequences vary by state. In California, a data broker that fails to register by January 31 may be subject to administrative fines of $200 per day plus enforcement costs. In Texas, brokers that fail to register may face civil penalties up to $10,000 per year. In Oregon, violations can lead to civil penalties up to $500 per violation per day (capped annually).
What disclosures are required?
Registration disclosures typically require listing trade names, business contact information, website addresses, a description of data collection and transfer practices, and information about how individuals can opt out of broker activities. Additional state‑specific disclosures can include security breach reporting, purchaser credentialing, and opt‑out procedures.