Data Broker Accountability and Transparency Act of 2018

This bill prohibits data brokers from obtaining or causing to be disclosed personal information relating to any person by making a false, fictitious, or fraudulent statement or representation, including by providing any document that the broker knows or should know to: (1) be forged, counterfeit, lost, stolen, or fraudulently obtained; or (2) contain a false, fictitious, or fraudulent statement or representation.

The bill defines "data broker" as a commercial entity that collects, assembles, or maintains personal information concerning an individual who is not a customer or an employee of that entity in order to sell or provide third-party access to the information.

Data brokers must establish procedures to ensure the accuracy of the personal information they collect, assemble, or maintain, and provide individuals a cost-free means to review their personal or identifying information.

Individuals may dispute the accuracy of their personal information with a written request that the data broker make a correction.

Data brokers must provide individuals with a reasonable means of expressing a preference to exclude their information from being used, shared, or sold for marketing purposes.