As regulators and lawmakers focus increasingly on data brokers’ practices, these middlemen are fielding more requests from individuals seeking deletion of their personal data or making other data subject requests (DSRs). Unlike many customer-facing businesses, data brokers often face myriad challenges authenticating DSRs because they lack individuals’ information. In this guest article, Prince Lobel Tye partner Joshua Cook details the distinct challenges for data brokers when processing DSRs, analyzes the complications that privacy brokers create, and offers practical, defensible solutions that data brokers and other companies can adopt to more safely process deletion and other DSRs. See “Touring California’s New Dashboard for Permanent Erasure of Personal Information” (Nov. 12, 2025).