D&B, along with two of its subsidiaries, is officially registered as a data broker in multiple U.S. states, meaning these companies are legally recognized as businesses that collect and sell personal information about people, often without a direct relationship with those individuals.
This analysis describes what Dun & Bradstreet's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Data broker registration confirms that these entities may collect, aggregate, and license personal and professional information, and that state-specific rights and opt-out mechanisms apply, including under California's CPPA and Vermont's data broker law.
The updated privacy policy removed explicit language describing how users can manage cookie preferences and enable chat functionality. Previously, the policy stated that users could click 'Manage Choices' to enable or disable specific cookies including 'Chat' cookies. The revised version no longer includes these detailed preference options in the displayed policy language. The terms now indicate that chat functionality requires accepting 'Chat Cookies,' but the granular control mechanisms previously described have been removed from the public policy disclosure.
View change record →The updated privacy statement removes extensive disclosures about Dun & Bradstreet's data processing practices, ethical commitments, certifications, and individual rights procedures. Previously, the policy described the company's core values, ethical principles, ISO certifications, cross-border privacy frameworks, data broker registrations in multiple states, and how individuals could exercise rights. The revised statement now provides minimal substantive guidance. Under the updated terms, users will find substantially less information about how their data is processed, what protections apply, and how to contact the company regarding their rights.
View change record →If you are a professional or business contact, your name, job title, employer, and contact details may be held and sold by D&B, Eyeota, or NetWise Data under data broker licensing arrangements. California and Vermont residents have specific statutory rights to opt out of or request deletion of data held by registered data brokers.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
"Dun & Bradstreet, Inc. is registered as a data broker in the U.S. States of California, Oregon, and Vermont. Further, Dun & Bradstreet, Inc., the entity maintaining this website, is a data broker under Texas law. To conduct business in Texas, a data broker must register with the Texas Secretary of State (Texas SOS). Information about data broker registrations is available on the Texas SOS website. Eyeota Pte. Ltd is registered as a data broker in the U.S. State of California. NetWise Data, LLC is registered as a data broker in the U.S. States of California and Vermont.Excerpt from Dun & Bradstreet's D&B Privacy Policy
REGULATORY LANDSCAPE: The explicit data broker registrations engage the California Consumer Privacy Act (CCPA) as amended by CPRA, enforced by the California Privacy Protection Agency (CPPA); Vermont's data broker statute (9 V.S.A.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Data broker registration confirms that these entities may collect, aggregate, and license personal and professional information, and that state-specific rights and opt-out mechanisms apply, including under California's CPPA and Vermont's data broker law.
If you are a professional or business contact, your name, job title, employer, and contact details may be held and sold by D&B, Eyeota, or NetWise Data under data broker licensing arrangements. California and Vermont residents have specific statutory rights to opt out of or request deletion of data held by registered data brokers.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Dun & Bradstreet.