Behavioural Profiling & Advertising Manipulation
You do not need to fill in a form. Your behaviour is the form.
The File You Did Not Know Existed
Tom had never heard of Acxiom. He had never signed up to their service.
They knew his home address, his estimated household income, his political lean, his health conditions (inferred from pharmacy purchases), his relationship status, his interest in sports betting (from a loyalty card purchase at a racing event four years ago), and a flag labelled "financially distressed."
He found this out when he submitted a Subject Access Request under GDPR. He had 60 days to dispute inaccurate entries. Some inferences were wrong. Most were not.
What Is Actually Happening
$0.001
the price per person that data brokers charge for individual records.
Bought in bulk, your complete profile costs less than a fraction of a penny.
Source: FTC Data Broker Report, 2024Beliefs, Not Just Interests
Modern ad targeting goes beyond demographics to psychographic profiles - inferred personality traits, political identity, religious beliefs, and emotional vulnerabilities. These are not declared; they are inferred from behaviour.
Mood-Based Ad Delivery
In 2017 an internal Facebook document showed the platform could identify teenagers feeling "insecure," "worthless," and "anxious" and sell this state to advertisers. Facebook called this an "oversight" after the leak.
Ads After Speaking Aloud
Cox Media Group's 2023 pitch deck explicitly offered "Active Listening" ad targeting - delivering ads based on conversations picked up by device microphones. Google and Meta distanced themselves after the leak.
You Are Followed Across the Web
Retargeting networks follow you from site to site, serving ads for products you viewed elsewhere. The shoe you looked at once will follow you to news sites, recipe apps, and weather tools for weeks.
How Your Profile Is Built
Loyalty cards
Every purchase is timestamped, geo-located, and categorised. Retailers sell this data to brokers who infer health conditions, life events, and financial state from your basket.
Free apps
Apps that cost nothing generate revenue by sharing your data. Location, contacts, browsing behaviour, and app usage are common data points sold to advertising networks.
Browsing while logged in
Google, Meta, and Microsoft link your web activity to your real identity when you are logged into any of their products. Their tracking scripts are embedded across most of the web.
Competition forms
Many prize draw forms exist solely to collect verified PII (name, address, phone, date of birth). The data is the prize.
Credit applications
Financial data is among the highest-value categories for brokers. Loan applications, store credit cards, and insurance quotes all feed into financial profile databases.
Try It: Build Your Data Broker Profile
Walk through 8 everyday actions and watch a data broker profile build itself.
What That Just Showed You
1. Profile building requires no single dramatic breach. Each action was ordinary. The profile is built by aggregating them. No single data point is the problem - the assembly is.
2. Inferences go far beyond what you shared. You did not tell any broker your political lean or health conditions. These were inferred from purchases and browsing. Inference can be wrong - but it is acted on as fact.
3. You can request your profile - and opt out. Under GDPR, you have the right to access the data a broker holds and request deletion. Under California's CCPA, you have similar rights. Opt-out is manual and must be repeated.
Three Things Worth Doing
1. Check your Google and Meta ad profiles. Google: myaccount.google.com/data-and-privacy. Meta: facebook.com/ads/preferences. These show inferences each platform holds. You can reset them.
2. Use a separate email for retail and competitions. A dedicated address for loyalty cards limits linking of your purchase data to your main identity.
3. Request deletion from major data brokers. Acxiom, LexisNexis, Experian, and Oracle Data Cloud all have GDPR/CCPA removal processes. The FTC's 2024 data broker report lists opt-out paths for the main players.
One Question Before You Continue
A data broker holds a 'financially distressed' flag inferred from your browsing and purchase history. Under GDPR, can you challenge this?