Collection without consent is not a failure of notice or consent design — it is a structural feature of the data broker economy. The business model requires comprehensive data on every individual, which is incompatible with genuine consent. The data sources are too numerous (apps, IoT, public records, ad-tech, scrapers), the collection is too invisible (SDKs, server-side tracking, ultrasonic beacons), and the data subjects are too many (2.5 billion profiles) for individual consent to be anything other than performative. You cannot meaningfully consent to data collection by 4,000+ brokers through 6–10 SDKs in each of 100+ apps on a device you carry 16 hours a day. Consent at this scale is a legal fiction.

Identity resolution is the irreducible mechanism that transforms raw data collection into actionable surveillance. Without identity resolution, collected data would remain fragmented and commercially useless. The technology is self-reinforcing: each new data point makes resolution more accurate, and more accurate resolution enables the merger of more data sources. The resolution operates at multiple layers simultaneously — deterministic (exact match on email/phone), probabilistic (behavioral pattern inference), device-level (cross-device graphs), and biometric (typing patterns, fingerprinting) — creating redundancy that defeats any single countermeasure. You cannot evade identity resolution without simultaneously defeating all resolution layers, which requires a level of technical sophistication available to virtually no one.

Supply chain opacity is not a side effect of complexity — it is a design feature that protects the broker economy from accountability. Transparency would enable individuals to exercise rights, regulators to enforce laws, and markets to price privacy risk. The opacity serves every participant except the data subject: brokers avoid accountability, buyers avoid scrutiny, and the entire chain operates in a regulatory shadow. The layered resale structure also makes deletion technically impossible — you cannot delete what you cannot find, and you cannot find data that has been copied, recombined, and redistributed across an opaque network of 4,000+ entities with no audit trail.

Opt-out futility is not a bug in the consent model — it is the mathematically inevitable outcome of applying individual rights against a system of 4,000+ entities with continuous re-ingestion from upstream sources. Even a perfect opt-out mechanism (instant, free, universal) would fail because the supply chain architecture means data is continuously re-collected from public records, partner sharing, and broker-to-broker resale. The opt-out model assumes a bilateral relationship (one person, one data holder) in a system that is multilateral (one person, thousands of data holders connected in resale chains). This structural mismatch cannot be fixed by making opt-outs easier — it requires changing the underlying data flow architecture.

Regulatory fragmentation is not a temporary condition awaiting the right legislation — it is a structural feature of governing a global, real-time industry through territorial, slow-moving legal systems. Even if a comprehensive US federal law passed tomorrow, it would face First Amendment challenges (Sorrell), enforcement resource constraints (FTC has ~1,100 staff for all consumer protection), jurisdictional limits (cannot reach offshore brokers), and the fundamental mismatch between the speed of data flows (milliseconds) and the speed of regulatory action (years). The patchwork is permanent because the problem is inherently multi-jurisdictional, the industry lobby is well-funded, and the constitutional framework creates structural obstacles to comprehensive data regulation.

Information asymmetry in the data broker economy is not merely an imbalance that could be corrected with transparency requirements — it is a fundamental structural feature that the industry requires to function. If individuals could see what brokers know about them, they would demand correction of inaccuracies (devastating to broker data quality claims), exercise deletion rights at scale (devastating to broker coverage claims), and make informed decisions about data sharing (devastating to broker collection volume). The asymmetry is maintained deliberately through corporate opacity, inference rather than collection, and the absence of any right to see the complete broker profile. The one-way mirror is load-bearing: remove it, and the surveillance economy collapses.

Harm externalization is the economic engine of the data broker industry. The business model is viable only because brokers do not bear the costs of the harms their products enable. If Spokeo were liable for stalking facilitated by its data, Venntel for warrantless surveillance, or Acxiom for discriminatory pricing, the industry’s economics would collapse. The liability firewall is constructed from multiple legal doctrines: Section 230 immunity, the ‘publicly available information’ exemption from privacy laws, the absence of data fiduciary duties, and the First Amendment data-as-speech doctrine from Sorrell. Each doctrine independently protects brokers; together they create an impenetrable shield. The costs of surveillance capitalism — measured in stalking deaths, discriminatory denial of housing and employment, democratic manipulation, and warrantless government surveillance — are borne entirely by individuals who never consented to the system that harms them.