Getting started with Data Broker Registration.
Who has to register, which states require it, and how Superset files and renews your registrations from a single questionnaire.
What registration is
If your company collects and sells personal information about consumers who are not your direct customers, several states classify you as a data broker and require you to register every year. Each state sets its own deadline, fee, and filing requirements.
Superset files those registrations for you. You fill out one questionnaire, and we submit to every state where you are required to register, then track the deadlines and handle renewals.
Where you have to register
Four states require data broker registration today. Their deadlines:
- Vermont January 31
- Texas One year after your previous registration
- Oregon December 31
- California January 31
The Data Brokers page at ai.trustsuperset.com/broker shows your status in each state at a glance.
How it works
- Fill out the questionnaire once. Open ai.trustsuperset.com/broker and click Edit Registration. You answer one set of questions about your company and your data practices, and Superset maps your answers onto each state's specific form.
- We file. Once your invoice is paid, Superset submits your applications to every state where you are required to register.
- We track renewals. Your deadlines live in our records. When a renewal comes due, we handle it.
You pay Superset's service fee plus the underlying state filing fees, which pass through at cost.
What the questionnaire covers
The form is split into sections you move between from the sidebar:
- About the Submitter The point of contact at your company.
- About the Business Legal entity details: name, address, entity type, jurisdiction of incorporation, and EIN.
- About the Data Collected For each data type (geolocation, names, biometric, SSN, health, genetic, and more), whether you collect, sell, or license it.
- Data Collection on Minors Your practices around data from minors.
- Opt-Out Practices How a consumer, or an authorized agent acting for them, can opt out, and through which channels.
- Security and Credentialing Your data security practices.
- California Reporting Requirements The annual metrics California requires (below).
- Additional Information Anything else a state asks for.
Fill it out once. Superset uses your answers to appropriately respond to each state's registration forms.
California's annual metrics
California requires data brokers to report request metrics each year. The questionnaire's California Reporting Requirements section collects them as part of your registration, and, if you're using Superset's DSR Manager, the same numbers are available in your Superset dashboard.
Renewals and state notices
Superset tracks every deadline and handles renewals, so you do not have to watch the calendar. Two things to expect in your inbox:
- State renewal notices A state may send a renewal notice directly to you. If you registered that state through Superset, it is already in our records and we will file it. Forward it to [email protected] if you want to confirm.
- Third-party solicitations "Registered agent" services sometimes email data brokers claiming you are not in good standing and asking for payment. These are upsells, not official notices. Check with us at [email protected] before paying anyone.
Important
- Registration is just the start. Once you're registered, Superset helps reduce the burden of compliance by helping you handle and automate DSRs, comply with California's new DROP system, honor GPC, and more. Be sure to check out Superset's other modules, and reach out with any questions.
- In California, your registration account is also your DROP account. The account you register with is the same one DROP runs on.
- Portal logins route through Superset. Your state portal accounts are registered with your
<your-domain>@trustsuperset.comforwarding address, so login emails and 2FA codes go to your Registry Forwarding Emails group. See Portal logins & 2FA codes to manage who receives them.