Ratings / Site
Critical Rating 1 / 5 · Critical — Active surveillance / serious risk.
Acxiom, a data and marketing company, poses a significant threat to user privacy due to its extensive data collection and sharing practices. In 2002-2003, the company experienced a major data theft where 1.6 billion customer records were stolen from its FTP servers, highlighting
Acxiom, a data and marketing company, poses a significant threat to user privacy due to its extensive data collection and sharing practices. In 2002-2003, the company experienced a major data theft where 1.6 billion customer records were stolen from its FTP servers, highlighting severe security vulnerabilities. Its business model has repeatedly drawn scrutiny, including a 2003 complaint by EPIC to the FTC for sharing personal information without consent, and 2018 GDPR complaints by Privacy International alleging unlawful processing of data for profiling. The privacy policy, updated June 1, 2026, confirms its role in marketing data products, offering opt-out mechanisms for marketing and limiting sensitive personal information use, but this does not negate its fundamental practice of collecting and processing vast amounts of personal data for commercial purposes. Furthermore, a 2024 Bavarian data protection authority ruling implicated Acxiom in the alleged secret trading of personal data, and a 2026 lawsuit by the Texas AG alleged Netflix shared consumer profiles with data brokers like Acxiom.
The full methodological and legal context for this rating. This card is what we point to when asked to substantiate the claim.