Getting started with Data Broker Registration.
Who has to register, which states require it, and how Superset files and renews your registrations from a single questionnaire.
What registration is
If your company collects and sells personal information about consumers who are not your direct customers, several states classify you as a data broker and require you to register every year. Each state sets its own deadline, fee, and filing requirements.
Superset files those registrations for you. You fill out one questionnaire, and we submit to every state where you are required to register, then track the deadlines and handle renewals.
Where you have to register
Six states require data broker registration. Their deadlines:
- Vermont January 31
- Texas One year after your previous registration
- Oregon December 31
- California January 31
- Connecticut Registration required from January 1, 2027
- New Jersey First registration window April 1 through June 30, 2027
The Data Brokers page at ai.trustsuperset.com/broker shows your status in each state at a glance.
How it works
- Fill out the questionnaire. Open ai.trustsuperset.com/broker and click Complete Registrations. Pick the states you're registering in this year, then answer one set of questions about your company and your data practices. Superset maps your answers onto each state's specific form, and next year your answers carry over.
- Check out. Checkout adds up your state fees, including processing fees, and Superset's fees before you pay. Pay by wire or ACH from the invoice it generates, or by credit card for an added fee.
- We file. Once you've paid, Superset submits your applications to every state you picked.
- We track renewals. Your next deadlines show under Upcoming on the Data Brokers page. When a renewal comes due, we handle it.
You pay Superset's service fee plus the underlying state filing fees, which pass through at cost.
What the questionnaire covers
The form is split into sections you move between from the sidebar:
- About the Submitter The point of contact at your company.
- About the Business Legal entity details: name, address, entity type, jurisdiction of incorporation, and EIN.
- About the Data Collected For each data type (geolocation, names, biometric, SSN, health, genetic, and more), whether you collect, sell, or license it.
- Data Collection on Minors Your practices around data from minors.
- Opt-Out Practices How a consumer, or an authorized agent acting for them, can opt out, and through which channels.
- Security and Credentialing Your data security practices.
- California Reporting Requirements The annual metrics California requires (below).
- Additional Information Anything else a state asks for.
Fill it out once. Superset uses your answers to appropriately respond to each state's registration forms.
Depending on your states, the questionnaire also asks for:
- Vermont surety bond From 2027, Vermont requires a $20,000 surety bond naming the State of Vermont as obligee. Upload it in the questionnaire. Don't have one? The questionnaire points you to a provider.
- Oregon prerequisites Before you can register as a data broker in Oregon, you need a registration with the Oregon Secretary of State and a registered agent in the state. Superset can handle both. A first-time Secretary of State registration needs a Certificate of Good Standing from your home jurisdiction, issued in the last 90 days.
- Portal logins If you're already registered in a state, share that portal account's username and password so we can renew through it. Logins are stored encrypted.
California's annual metrics
California requires data brokers to report request metrics each year. The questionnaire's California Reporting Requirements section collects them as part of your registration. If you used Superset's DSR Manager that year, click Fill with Metrics Data from Superset and the numbers fill in for you.
Renewals and state notices
Superset tracks every deadline and handles renewals, so you do not have to watch the calendar. Two things to expect in your inbox:
- State renewal notices A state may send a renewal notice directly to you. If you registered that state through Superset, it is already in our records and we will file it. Forward it to [email protected] if you want to confirm.
- Third-party solicitations "Registered agent" services sometimes email data brokers claiming you are not in good standing and asking for payment. These are upsells, not official notices. Check with us at [email protected] before paying anyone.
Important
- Registration is just the start. Once you're registered, Superset helps reduce the burden of compliance by helping you handle and automate DSRs, comply with California's new DROP system, honor GPC, and more. Be sure to check out Superset's other modules, and reach out with any questions.
- In California, your registration account is also your DROP account. The account you register with is the same one DROP runs on.
- Portal logins route through Superset. Your state portal accounts are registered with your
<your-domain>@trustsuperset.comforwarding address, so login emails and 2FA codes go to your Registry Forwarding Emails group. To see a login, open the Data Brokers page, click Portal logins, then Show password. Each click is recorded. See Portal logins & 2FA codes to manage who receives them.