The Soul Trade: Data Brokers, LGPD and Self-Sovereign Identity

The Market Behind Your Mirror

The global data broker industry was valued at approximately $303 billion in 2024, projected to reach $333 billion by 2025, a compound annual growth rate of nearly 10% (GlobeNewswire/Yahoo Finance). That’s not abstract growth, that’s us, packaged and sold. Over 5,000 companies worldwide operate in this market, collecting from public records, browsing activity, social media, purchase histories and location data — often without your knowledge or meaningful consent (Dataintelo Market Report).

These aren’t shadowy figures, they’re publicly traded corporations. Experian reported 8% year-on-year revenue growth in fiscal 2024. TransUnion hit 12% organic constant-currency expansion in Q3 2024. In January 2025, Experian launched its first third-party data marketplace, expanding distribution of external datasets (Mordor Intelligence).

Architecture of Dehumanization

Data brokers sell data in form of categories, a 2014 Federal Trade Commission report described how brokers sort consumers into segments like “Urban Scramble” and “Mobile Mixers”, both disproportionately concentrated with African American and Latino populations in lower income brackets (R Street Institute). A 2023 Duke University study confirmed that some brokers openly market highly sensitive mental health condition data on the open market with minimal vetting (House Energy & Commerce Committee).

The Department of Defense purchased location data collected from Muslim prayer apps to monitor worship communities. Police departments have bought broker data to target neighborhoods with high concentrations of Black and Latino residents. Mortgage firms have used cookie-derived data to offer higher interest rates to African American and Latino borrowers, a practice researchers call “online redlining” (Brookings Institution). The Electronic Privacy Information Center (EPIC) has documented how broker data facilitates harm to immigrants, domestic violence survivors and public officials.

This is more than a privacy issue, it’s a civil rights issue wearing a privacy costume. When 132 million people of color in the U.S. alone lack protection against data-driven discrimination (Leadership Conference on Civil and Human Rights), the data broker isn’t a neutral middleman, it’s the amplifier of a structural inequality.

The Regulatory Void

In the United States, the Consumer Financial Protection Bureau (CFPB) proposed a rule titled “Protecting Americans From Harmful Data Broker Practices” and then withdrew it in May 2025 under the Trump administration’s deregulatory agenda (90 Fed. Reg. 20568, May 15, 2025) (White House Digital Assets Report, July 2025). The rule would have expanded CFPB oversight of data broker activities under Regulation V. It’s gone now.

Brazil, however, is moving differently, The Autoridade Nacional de Proteção de Dados (ANPD) began issuing its first administrative sanctions under the LGPD in 2023-2024, including at least seven sanctioning decisions for breach-notification failures. Since enforcement began, total fines have reached approximately R$ 98 million (20 million USD). In 2025, the ANPD applied its first substantial monetary penalties, exceeding R$ 1.5 million, for violations of incident-reporting duties (ANPD 2024-2025 Activity Report; Martinelli Advogados).

Notably, in July 2024, the ANPD suspended Meta’s use of Brazilian user data for AI training and in December 2024, it ordered TikTok/ByteDance to strengthen age verification and block unregistered users in Brazil, a federal court upheld the ruling after TikTok’s appeal (ManageEngine Privacy Insights). The LGPD allows fines of up to 2% of a company’s Brazilian revenue, capped at R$ 50 million per violation. That’s not toothless and it’s also not enough against a $300+ billion global machine.

Building the Concept

The counter-narrative isn’t just regulation, it’s architectural rebellion. Self-sovereign identity (SSI), built on blockchain infrastructure that offers a fundamentally different model: your identity lives on your device, verified cryptographically, shared selectively.

In 2025, multiple peer-reviewed frameworks demonstrated practical SSI implementations: the IOTA-assisted SSI framework for decentralized authentication with selective disclosure (IEEE Access, 2025), Oracle’s blockchain integration of Hyperledger AnonCreds eliminating correlatable identifiers through zero-knowledge proofs (Oracle Blockchain Blog) and an academic framework for SSI-based access control in financial institutions published in Cryptography (MDPI, 2025; DOI: 10.3390/cryptography9010009). The EU is piloting digital identity wallets grounded in SSI principles (Electronic Markets, Springer, April 2025).

The NeoCaipira Position

Here in Brazil, we have a word — caipira — that carries the weight of roots, of belonging to land and community, of existing in a specific place with specific stories. The NeoCaipira extends that into the digital: you carry your roots online and nobody has the right to harvest them.

The data broker model treats human narrative as a commodity stream. It reduces lived experience like our flaws, our vulnerabilities, our choices, to purchasable metadata. That’s the soul trade and it operates not through dramatic theft and go through quiet accumulation: every cookie accepted, every location pinged, every demographic inferred without consent.

Rejecting it requires two simultaneous acts: demanding accountability, supporting ANPD’s enforcement, fighting for stronger regulation in jurisdictions where it’s been gutted and naming the companies that profit from demographic exploitation. Building alternatives — adopting self-sovereign infrastructure, supporting decentralized identity projects and insisting that technology should serve human dignity rather than commercial extraction.

Your identity isn’t a dataset, the flaws aren’t a product line. The question isn’t whether we can be commodified, we already are. The question is whether we’ll accept the architecture that makes it inevitable or build one that makes it impossible.

contato@andresmaia.com

©2026