Data brokers are selling your profile. Here’s how to use the GDPR to stop them.

Spanish YouTuber Carles Tamayo has touched a nerve again, in his usual informal, funny, and pointed style. In the final episode of Se nos ha ido de las manos (“It’s gotten out of hand”), a documentary series that premiered on Spanish public television in April 2026, he looks at how companies buy and sell personal data. The episode, titled El activo eres tú (“You’re the asset”), puts an uncomfortable question on the table: Who has our data, and what is being done to it? And what are we willing to give up in return for the promise of something free? After getting spam calls from companies that knew too much about him, Tamayo turned his own production company into a data broker to see from the inside how personal data is collected and traded. Here’s how the data broker business works, and…