Say I have a database full of metrics, user agents, IPs, GPS, names, addresses, photos, etc. on a million users, who would I call to sell it? Genuinely curious.
Here's a list of approximately a hundred companies that acquire and sell data in various ways, some of whom would plausibly be interested in your hypothetical trove of data:
One part of CCPA is that data brokers have to register themselves with the Attorney General if they trade in the data of California residents. The registry is public. You could start there.
