Command Brief / CB-165

The map is the finding: what an emergent taxonomy of data holders tells a principal

Nobody Built This System

The intelligence

A working reference of consumer data holders, compiled one entry at a time by following where records actually reside, grouped itself into categories that nobody set in advance. This brief asks what that emergent structure tells a principal that a removal list cannot, including where effort is wasted. It rests on the firm's own coded catalog of holders, read against the relevant federal statutes. For principals and family offices judging whether a remediation program is complete.

COMMAND intelligence

Unlock this Command Brief.

Get this assessment, the full subscription collection, and new intelligence as it is published.

Introductory rate · through 30 November

$75/month

For your first year, then $100/month. Or $750 for the first year, then $1,000 annually.

The CORGI Morning Brief, each morning
This brief and the subscription collection, 100+ briefs
New Command Briefs as they are released
Principal and Analyst briefs, as PDF

Subscribe to COMMAND

Secure checkout through Substack. Substack asks for your email first.

Full subscription details

Topics

Data BrokersData RemovalThreat Modeling

Follow the thread

Cross-referenced intelligence.

CB-107registered

Command Brief

Built to keep you findable: removal is a position, not an event

Your Record Comes Back

California's Delete Request and Opt-out Platform began binding registered data brokers on 1 August 2026, requiring them to act on deletion requests on a recurring cycle. This brief asks why a record can still be found after a removal apparently succeeded, how much of that the new duty reaches, and how removal work should be judged over time. Built from California Privacy Protection Agency materials and the firm's removal casework. For principals and advisors assessing a deletion program.

Data RemovalPeople-SearchData Brokers

2026-06-01View record

CB-150registered

Command Brief

The price of doing the thing: New Jersey's volume fee and where it is actually exposed

The Fee Fight Is Not the Live Problem

New Jersey's A5328, signed on 30 June 2026, created a data broker registration regime whose annual fee schedule the information industry quickly attacked. This brief asks where the statute is genuinely vulnerable and where its compliance exposure actually sits, apart from where the public argument has settled. It works from the enacted text, the legislative record, other states' fees and the industry's objections. For family offices and counsel with holdings that touch New Jersey residents' data.

Privacy Law & RegulationData BrokersData Broker Registries

2026-07-13View record

CB-166subscription

Command Brief

What we remove, freeze and watch

We Will Not Tell You It Is Erased

Clients who commission footprint reduction regularly ask why some records come down quickly and others never do. Written for that client, this brief sets out how the firm decides which response a given record receives, and what protection remains where erasure is out of reach. It is built on the governing legal regimes, named categories of holders and the record of recent breaches and bankruptcies. For principals and family offices setting expectations for a removal program.

Data RemovalData BrokersBreach & Leaked Data

2026-07-21View record

CB-254subscription

Command Brief

The File Is Not the Product: What a Data Broker Actually Sells

Your Broker File Is a Prediction

In September 2026 Consumer Reports used new state access rights to obtain Acxiom broker files, and coverage by The Markup and CalMatters dwelt on how much in them was wrong. This brief asks a different question: what the file is actually for, what a buyer does with it, and what a correction or deletion request can and cannot reach. Built from the investigation, buyer and broker statements, and two state disclosure statutes. For advisors running broker removals for principals.

Data RemovalData BrokersBreach & Leaked Data

2026-09-17View record