Bipartisan Push to Close Data Broker Loophole and Protect Privacy Rights

The bipartisan defense of the Fourth Amendment is reaching a critical juncture as lawmakers and editorial boards across the country call for an end to the "data broker loophole." This legal gap has allowed federal agencies—including the FBI, DEA, and IRS—to circumvent constitutional warrant requirements by purchasing sensitive personal information from commercial data brokers. By treating personal data as a commodity rather than a protected private interest, the government has effectively bypassed the spirit of the Fourth Amendment, which guards against unreasonable searches and seizures. This development is particularly significant for the RegTech and Legal-Tech sectors, as it signals a shift toward more stringent data governance and a reevaluation of how commercial data can be utilized by state actors.

The industry context for this development is rooted in the explosion of the commercial data market. Over the past decade, data brokers have built a multi-billion-dollar industry by aggregating and selling everything from real-time geolocation data to detailed web browsing histories. While the Supreme Court’s 2018 decision in Carpenter v. United States established that law enforcement must obtain a warrant to access cell site location information from service providers, the ruling did not explicitly cover the purchase of that same data from third-party brokers. This has created a two-tiered system where constitutional protections depend on the source of the data rather than the nature of the information itself, a discrepancy that the proposed legislation seeks to rectify.

“

The Fourth Amendment Is Not For Sale Act, the primary legislative vehicle for this reform, would prohibit law enforcement from purchasing data that was obtained through illegal means or in violation of a service provider’s terms of service.

For the RegTech and Legal-Tech sectors, the closure of this loophole represents a significant shift in the regulatory landscape. Companies that facilitate data sales or provide analytical tools to law enforcement will face heightened compliance burdens. The Fourth Amendment Is Not For Sale Act, the primary legislative vehicle for this reform, would prohibit law enforcement from purchasing data that was obtained through illegal means or in violation of a service provider’s terms of service. This will necessitate more rigorous due diligence and auditing processes within the data supply chain, as firms must ensure that the data they handle is not being used to facilitate warrantless government surveillance. Legal teams will need to update their data processing agreements to account for these new restrictions on government access.