Collecting data about a person or organization without their knowledge, such as crawling their public filings and social media accounts, and purchasing information about them from data brokers. Compare with activity data collection, which happens with the entity’s knowledge.