Houston Data Brokers

Who Buys Business Data, and Why

"Data broker" usually suggests firms trading profiles of private individuals. Houston businesses more often meet another side of the market: buyers who want facts about operations, assets and equipment, licensed from whoever records them.

Investors and lenders want early readings on a sector before it shows up in quarterly results. Insurers and engineers want failure and maintenance histories to model risk. Software and analytics companies want large, consistent records to train models or build benchmarks. In each case the buyer pays for a better decision, not for rows in a file.

Often an aggregator sits in the middle, pooling data from many similar firms so none can be singled out and selling the pooled view. Other deals are direct: one company licenses a feed to another under a contract with use limits, a term and audit rights.

Operational Data Versus Personal Data

Most of the value in a B2B deal sits in operational data: run times, throughput, sensor readings, defect rates and similar records produced as a side effect of the work. Personal data, meaning anything linked or reasonably linkable to an identifiable person, is a different category. Texas regulates it closely, and the line between the two is where most of the legal risk lives.

Greater Houston's Data Economy

Houston, the largest city in Texas and seat of Harris County, anchors a metro reaching into Fort Bend, Montgomery, Brazoria, Galveston and other counties. Its economy produces unusually technical data tied to costly physical assets.

Energy From Wellhead to Refinery

Houston is widely called the energy capital of the world, and the label reflects the whole oil and gas chain. ConocoPhillips, EOG Resources, Occidental, Phillips 66, Kinder Morgan and Halliburton all have their headquarters in the city, and ExxonMobil's headquarters campus is in Spring, just north of Houston. West Houston's Energy Corridor along I-10 is lined with operator, oilfield services and engineering offices, and seismic contractors, midstream operators and equipment makers cluster across the region.

Refineries and chemical plants line the Houston Ship Channel through Pasadena, Deer Park and Baytown, with more in Texas City, each keeping years of process and maintenance history.

The Port and the Airports

Port Houston, with container terminals at Barbours Cut and Bayport, is one of the busiest ports in the United States, and the Ship Channel also serves many private terminals and industrial docks. Freight moves inland on rail, I-10, I-45 and I-69. George Bush Intercontinental and William P. Hobby airports carry passengers and air cargo, and Ellington Airport hosts the Houston Spaceport.

The Texas Medical Center

South of downtown, the Texas Medical Center is one of the largest concentrations of hospitals, medical schools and research institutions anywhere. It includes the University of Texas MD Anderson Cancer Center, Houston Methodist, Memorial Hermann, Baylor College of Medicine and Texas Children's Hospital. Around it are research organizations, device startups, billing firms and software vendors, many of which touch patient information.

Space, Universities and the Energy Transition

NASA's Johnson Space Center, home of Mission Control, sits in the Clear Lake area amid aerospace contractors, and commercial space companies such as Axiom Space and Intuitive Machines are based in Houston. Rice University and the University of Houston anchor research in engineering and energy. In Midtown, The Ion, a redeveloped Sears building, and Greentown Labs' Houston incubator host startups in carbon capture, hydrogen and industrial software, often partnered with energy companies.

Construction, Engineering and the Suburbs

Houston has no conventional zoning code, and the region keeps building plants, terminals, hospitals, warehouses and subdivisions, with engineering firms and contractors recording schedules, quantities and costs on all of it. Growth reaches well past the city limits. The Woodlands and Conroe in Montgomery County, Sugar Land in Fort Bend County, and Katy, Cypress and Spring carry corporate offices, medical campuses and fast-growing housing. Pearland and League City sit toward Clear Lake and the coast, while Pasadena and Baytown remain tied to the Ship Channel's industrial base.

Datasets Houston Industries Produce

Six kinds of records recur across the Houston economy. Each has buyers, and each raises ownership questions to settle before any talk of price.

Seismic, Well and Reservoir Data

Subsurface data is the most valuable and most tangled category in the region. Seismic surveys, well logs, cores and production histories are expensive to acquire, and seismic licensing is an established market: contractors shoot surveys at their own expense and license the results to many operators, usually under terms that bar passing the data on and may require a new license or transfer fee if the licensee is acquired. An operator holding seismic under someone else's license generally cannot resell it.

Well data shared among working-interest partners is usually governed by a joint operating agreement that restricts disclosure without the partners' consent, and data from a farmout or acquisition data room is typically under a confidentiality agreement. Much basic well information, including permits, completion reports and reported production, is filed with the Railroad Commission of Texas and is public, which lowers the price of anything that merely repeats it. The value lies in what filings leave out, such as detailed completion parameters, pressure data or decline behavior across many wells.

Pipeline, Plant and Sensor Data

Midstream operators, compressor stations, terminals and plants generate continuous pressure, flow, temperature, vibration and corrosion readings, plus inspection and maintenance logs. Equipment makers and predictive-maintenance firms want them to train failure models; insurers want them to price risk. Two cautions apply. Details of pipelines, chemical plants and port facilities can be security-sensitive, and some are restricted by federal security rules, so anything revealing vulnerabilities, control system layouts or security measures stays out. And data collected from a customer's equipment under a service contract may belong to the customer.

Refining and Petrochemical Operations

Refiners and chemical makers keep unit-level records on yields, energy use, catalyst life, turnarounds and emissions. Some is reported to regulators; the rest is closely held because it reveals margins and capacity. The licensable pieces are generalized ones, such as reliability statistics or energy intensity pooled with other sites so no competitor can back out one plant's economics.

Port, Maritime and Freight Records

Terminal operators, drayage carriers, forwarders and warehouses along the Ship Channel record vessel calls, container dwell, gate turn times and truck wait times. Rolled up by week and terminal, those figures interest shippers, logistics planners and investors watching trade flows. Shipment-level details usually belong to the shipper or are confidential under the service contract, and driver location trails are employee data to be pooled before use.

Clinical and Medical Research Data

Hospitals, physician groups, labs and their vendors hold the richest health data in Texas, and almost all of it is protected. Research datasets from the Texas Medical Center are typically governed by an institutional review board approval, consent language and a data use agreement, each of which can limit reuse, and de-identification must meet HIPAA's standards. Vendors handling data for a provider are usually business associates and cannot license it for their own benefit. The safer opportunities are equipment uptime, scheduling, supply usage or staffing patterns that do not describe patients.

Engineering and Construction Project Data

Engineering firms and contractors accumulate estimates, unit costs, productivity rates, change orders and schedule slippage across hundreds of projects, and cost benchmarks built from that history interest owners, lenders and estimating software companies. But owner contracts on plant, terminal and public projects usually make deliverables, drawings and project records the owner's property, with confidentiality that outlasts the job. What a firm typically keeps is its own know-how: aggregated productivity and cost ratios stripped of client names and anything that identifies a facility.

What Can Be Sold and What Should Stay Put

Two questions decide most cases. Do you actually hold the rights to the data, free of a license, partner or customer claim? And can anyone be identified from it, whether a person, a client or a specific facility?

Most right-hand entries turn on contracts, not privacy statutes: seismic licenses, operating agreements, master service agreements, owner contracts and data use agreements. Read them before running numbers. Crew time sheets, badge logs and fleet telematics describe your workers, so strip or aggregate them too.

How Buyers Put a Price on a Dataset

No public price list exists for operational data, and offers vary widely. These points usually move the number.

1. Decision value.Data that changes a costly choice, such as where to drill or when to replace a compressor, earns the most.
2. History.Energy data spanning only one price environment can mislead; long, unbroken records show cycles.
3. Cadence.A recurring feed lets a buyer watch conditions change, so it usually beats a one-off dump.
4. Scarcity.If the facts are public, as with much Texas production reporting, or sold by a vendor already, the price drops sharply.
5. Coverage.Deep coverage of one basin, terminal or equipment class often beats thin coverage of many.
6. Documentation.Field definitions, units, timestamps and known gaps save the buyer weeks of cleaning.
7. Clean title.Documented ownership, no conflicting licenses and no personal data shorten diligence.

Consistency often counts for more than size, and any early figure is a starting range that will move once a buyer reviews samples.

Texas and Federal Rules to Check First

Texas has a comprehensive consumer privacy statute, a data broker registration law broadened in 2025, firm breach notice deadlines and a medical records law that reaches further than HIPAA. Add federal law and your own contracts before a dataset leaves the building.

The Texas Data Privacy and Security Act

The Texas Data Privacy and Security Act, Business and Commerce Code Chapter 541, took effect July 1, 2024. Texas residents, acting as individuals, can access, correct, delete and port their personal data and opt out of its sale, targeted advertising and certain profiling. Selling sensitive data, such as precise geolocation, health diagnoses or biometrics, needs the consumer's consent and a specific posted notice.

Unlike most state privacy laws, the Act has no revenue or headcount threshold. It covers businesses that operate in Texas or serve Texans and process or sell personal data, except small businesses as defined by the U.S. Small Business Administration, which still need consent before selling sensitive data. Exempt groups include GLBA financial institutions, HIPAA covered entities and business associates, nonprofits and colleges. People acting in a commercial or employment role are not "consumers" under the Act, so pure B2B operational data sits mostly outside it.

The Texas Attorney General enforces the Act exclusively; there is no private lawsuit right. The Attorney General must give 30 days' written notice and a chance to cure before suing, and penalties can reach $7,500 per violation. In January 2025 the Attorney General filed the first lawsuit under the Act, against Allstate and its subsidiary Arity over driving data gathered through mobile apps; the petition also cited the data broker law.

The Texas Data Broker Law

Texas also requires data brokers to register. The law was enacted in 2023 as Business and Commerce Code Chapter 509; the Texas Secretary of State now cites it as Chapter 510. A covered data broker must file a registration statement with the Secretary of State and pay a $300 fee, renewed yearly, keep a written information security program, and post a conspicuous notice on its website or app stating that it is a data broker.

Two 2025 laws took effect September 1, 2025. Senate Bill 2121 dropped the "principal source of revenue" test: a data broker is now any business entity that collects, processes or transfers personal data it did not collect directly from the individual. The law applies where, in a 12-month period, the entity gets more than half its revenue from such data, or earns revenue from such data about more than 50,000 individuals. Senate Bill 1343 requires the website notice to explain how consumers can use their rights under the privacy act, and the registration statement to link to those instructions.

The practical point for a Houston business: start buying, enriching or reselling personal data about people you never dealt with, and you may become a registrable data broker yourself, even as a sideline. Missing registration or notice can bring civil penalties of up to $10,000 in a 12-month period. Properly de-identified data, employee data and publicly available information are excluded, another reason to keep personal data out of what you license. The Secretary of State's data broker FAQ notes that each business must decide for itself whether it has to register.

Breach Notice and Medical Records

Under Business and Commerce Code Section 521.053, a business that owns or licenses computerized sensitive personal information must notify affected people within 60 days of determining that a breach occurred, and must notify the Attorney General within 30 days if 250 or more Texans are affected.

Texas Health and Safety Code Chapter 181 defines "covered entity" more broadly than HIPAA, reaching many businesses that handle protected health information, and it generally bars covered entities from disclosing that information in exchange for payment.

Federal Law and Your Own Promises

HIPAA limits how providers, health plans and business associates use and sell protected health information and sets two accepted de-identification routes. The Gramm-Leach-Bliley Act governs financial institutions' handling of customers' nonpublic personal information. Section 5 of the FTC Act bars unfair or deceptive practices, including sharing data in ways your privacy statements did not disclose. Export controls can reach some oilfield and aerospace technical data. And your own notices and contracts may promise more than any statute; those promises bind you.

This page is general education, not legal advice. Talk to a Texas-licensed attorney, and to counsel in any other state where your customers live, before licensing data.

Protecting Your Business and Its Owners From Brokers

Brokers are already profiling your company and the people who run it.

Texas business filings, Harris and Fort Bend County property records, court records and professional licenses are public, and broker sites combine them into profiles showing an owner's home address, phone numbers and relatives. Where you can, list a registered agent or business address instead of your home.

Texans can use the privacy act to tell companies to stop selling their personal data or using it for targeted advertising, and to delete what they hold. Search the main people-search sites for yourself and your company, file opt-out requests and keep a dated log, because listings return. The main site's opt-out checklist walks through the steps.

Internally, limit who can export customer, patient and employee records, and require multifactor sign-in. Data that never leaves your systems cannot reach a broker's catalog.