Data brokers: Issues Paper

 ACCC, here. 

Data brokers under the spotlight: A commentary on the ICO vs. Experian case

 iapp, here. 

Investigation into data protection compliance in the direct marketing data broking sector

 ICO, here. 

Investigation into data protection compliance in the direct marketing data broking sector

 ICO, here. 

Here are the data brokers quietly buying and selling your personal information

FastCompany, here. 

Third-Party Data Is A Bad Habit We Need To Kick

AdExchanger, here. 

Facebook and Google Are the New Data Brokers

C. Hoofnagle, here. 

Data Brokers Co-Opetition

Y. Gu, L. Madio, C. Reggiani, here. 

Transparency and the Marketplace for Student Data

C. Russell, J. Reidenberg, E. Martin, T. Norton, here. 

Banks and Tech Firms Battle Over Something Akin to Gold: Your Data

NYTimes, here. 

Epsilon and Others Scramble for Alexa Data from Amazon

AdAge, here. 

Data Financing for Global Good

Oxford Internet Institute, here. 

Who oversees data brokers selling your personal info? No one

LATimes, here. 

Wer im Netz Milliarden mit unseren Daten macht

FutureZone.at, hier. 

Networks of Control: A Report on Corporate Surveillance, Digital Tracking, Big Data & Privacy

W. Christl, S. Spiekermann, here. 

Data brokers : le pétrole et l’iceberg

CNIL, ici. 

Data brokers and profiling in the Netherlands

F. Kreiken, here. 

People's Deepest, Darkest Google Searches Are Being Used Against Them

TheAtlantic, here. 

UK’s largest online pharmacy fined £130,000 for selling patients’ data to scammers

MedConfidential, here.

ICO's "Monetary Penalty Notice" here.

"35. Pharmacy2U has obtained personal data unfairly because its online registration form and privacy policy did not inform its customers that it intended to sell their details to third party organisations, in addition to sending out its own marketing material. It would not be within a customer’s reasonable expectation that this form of disclosure would occur, even if they were willing to agree to the receipt of marketing material from Pharmacy2U itself. If a customer wished to take up Pharmacy2U’s offer to opt out of “Selected company data sharing”, they also had to go to the trouble of logging into their account and changing the setting.
36. In addition, Pharmacy2U did not provide the further information that was necessary to enable the processing in respect of its customers to be fair.
37. In the circumstances, Pharmacy2U’s customers did not give their informed consent to the sale of their personal data to third party organisations. Therefore Pharmacy2U did not have a lawful basis for processing the data under Part I of Schedule 2 to the DPA.
73. The Commissioner has decided that it is appropriate to issue a monetary penalty in this case, in light of the nature and seriousness of the contravention, Pharmacy2U’s shortcomings in terms of its DPA duties and the risks posed to a number of individuals. He has also considered the importance of monetary penalties in dissuading future contraventions of the DPA and encouraging compliance, in accordance with his policy."

The Commercial Use of Consumer Data

DotEcon with Analysys Mason for the CMA, here.
See also the Report on the CMA’s call for information, here.