Thomson Reuters collects information about people from public records and other sources, and sells compiled profiles as products, meaning your information could be in a Thomson Reuters database even if you never signed up for their services.
This analysis describes what Thomson Reuters's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Because Thomson Reuters operates as a data broker, individuals may have personal information collected, profiled, and sold without ever interacting directly with the company, making awareness of opt-out rights critical.
Interpretive note: The precise scope of which information products include personal data about non-customers, and the completeness of Thomson Reuters' data broker registrations across all applicable jurisdictions, is not fully enumerated in the statement.
Your name, address, professional history, financial records, or other personal information may appear in Thomson Reuters information products sold to law firms, corporations, or government agencies, regardless of whether you have ever used a Thomson Reuters product directly.
Cross-platform context
See how other platforms handle Data Broker and Information Product Disclosure and similar clauses.
Compare across platforms →Monitoring
Thomson Reuters has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"Thomson Reuters compiles and sells information products that may include personal information derived from publicly available sources, licensed data, and other lawfully obtained information. In jurisdictions where Thomson Reuters is required to register as a data broker, it complies with applicable registration requirements.— Excerpt from Thomson Reuters's Thomson Reuters Privacy
REGULATORY LANDSCAPE: Data broker operations engage CCPA and CPRA (California data broker registration and opt-out of sale requirements), Vermont's data broker registration law, Texas HB 4, and other state data broker statutes. The FTC has authority over unfair or deceptive practices by data brokers. The statement's acknowledgement of registration compliance signals awareness of these obligations but does not enumerate all applicable jurisdictions. GOVERNANCE EXPOSURE: High. The data broker context creates obligations to respond to data subject rights requests from individuals who have no direct contractual relationship with Thomson Reuters, which is operationally complex. The CPRA's right to opt out of the sale of personal information applies to data broker operations, and Thomson Reuters' disclosure that it sells information products means this right is engaged for California residents. JURISDICTION FLAGS: California (CCPA and CPRA), Vermont, Texas, and Virginia create the highest immediate exposure for data broker registration and opt-out compliance. EU and UK residents may have stronger rights under GDPR's legitimate interests challenge and right to erasure even in the context of publicly sourced data. Illinois BIPA could be relevant if any compiled profiles include biometric identifiers. CONTRACT AND VENDOR IMPLICATIONS: Organisations that purchase Thomson Reuters information products should assess whether their use of those products creates downstream compliance obligations, particularly regarding the accuracy of personal information and the rights of individuals whose data is included. Procurement teams should review data licensing agreements for representations about data provenance and lawfulness. COMPLIANCE CONSIDERATIONS: Legal teams advising clients whose personal information may appear in Thomson Reuters data products should advise those clients to submit opt-out or deletion requests via the privacy portal. Compliance teams at organisations purchasing these products should conduct due diligence on the lawfulness of the underlying data collection and the adequacy of Thomson Reuters' data subject rights infrastructure.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Because Thomson Reuters operates as a data broker, individuals may have personal information collected, profiled, and sold without ever interacting directly with the company, making awareness of opt-out rights critical.
Your name, address, professional history, financial records, or other personal information may appear in Thomson Reuters information products sold to law firms, corporations, or government agencies, regardless of whether you have ever used a Thomson Reuters product directly.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Thomson Reuters.