While the specific laws vary depending on your location, data brokers are generally legal, although some may operate in a gray area of the law.