What is the difference between zero-party and first-party data?

Intent. First-party data is observed: a company records your behavior in its own product — pages viewed, items bought — and infers preferences from it. Zero-party data is declared: you state the preference yourself, knowingly. The same fact can arrive both ways; the zero-party version is more accurate about motive and carries explicit consent, while the first-party version captures what you actually did.

Who coined the term zero-party data?

Forrester Research, specifically analyst Fatemeh Khatibloo, in the late 2010s. The firm defined it as data a customer intentionally and proactively shares with a brand — preference data, purchase intentions, personal context. The term spread quickly because it named something the industry needed as privacy regulation tightened: a class of data whose collection is unambiguous and consent-clean.

Why does zero-party data matter for a personal CRM?

Because it draws the ethical line for what belongs in your contact notes: things people told you, knowing you'd remember. A CRM filled only with shared information stays accurate, respects the context in which things were said, and would not embarrass you if a friend read their own entry. Auto-enriched data fails all three tests — which is why some tools refuse to collect it.

Personal CRM basics

Zero-party data

Zero-party data is information a person intentionally and proactively shares with you — stated preferences and context, as opposed to data observed or bought.

Part of the Endearist relationship glossary →

Zero-party data is what someone tells you on purpose. The term was coined by Forrester analyst Fatemeh Khatibloo to name the data a customer 'intentionally and proactively shares' with a brand — preferences, intentions, personal context — and to distinguish it from everything companies infer, observe or purchase.

The 'zero' extends an existing ladder. First-party data is what a company observes about you through its own products: clicks, purchases, session lengths. Second-party data is someone else's first-party data, shared through a partnership. Third-party data is bought from brokers who aggregated it across the web. Zero-party data sits before all of them: nothing was observed, because the person simply said it.

The concept matured as privacy regulation and the death of third-party cookies made inferred data expensive and legally fragile. Data given freely comes with built-in consent and built-in accuracy — nobody knows your preferences better than you — which is why marketers now court it with quizzes and preference centers, and why the concept maps so cleanly onto personal relationship tools.

The data-party ladder, from zero to third

The four rungs differ in how the data came to exist, and that origin determines both quality and legitimacy. Third-party data — bought profiles, scraped attributes — is broadest and worst: often stale, frequently wrong, collected under consent the subject doesn't remember giving. Second-party data inherits those problems one step removed. First-party data is accurate about behavior but mute about motive: a company sees what you clicked, then guesses why. Zero-party data inverts the guessing — the person states the why directly, trading reach for truth. The marketing industry's pivot toward rung zero is pragmatic, not virtuous: regulators keep raising the price of the other rungs, and stated data simply converts better.

Why the GDPR quietly favors zero-party data

The GDPR never uses the term, but its machinery rewards exactly this kind of data. Processing requires a legal basis, and the cleanest ones — consent, or performing something the person asked for — are inherent to data someone volunteered for a stated purpose. Purpose limitation is easy to honor when the purpose was explicit at the moment of sharing. Subject rights like access and erasure are simple to fulfill when you know precisely what someone gave you and why. Contrast inferred and acquired data, where controllers must reconstruct or invent justifications after the fact. The practical pattern across privacy regimes worldwide is the same: the closer data sits to a person's deliberate act of telling you, the smaller your compliance surface.

A personal CRM is a zero-party dataset

Transpose the marketing concept to your own address book and it becomes a design principle: a personal CRM built only from what people told you is a zero-party dataset about your relationships. Your friend mentioned the new job, the allergy, the divorce — to you, in conversation, expecting you to remember. Contrast the enrichment approach, where software pads contact records with scraped employers and social handles: that is third-party data about your friends, with all the staleness and consent problems the marketing world is fleeing. Endearist enforces the zero-party boundary by construction — it ships no enrichment and no scraping, so every field in a contact record traces back to something you typed because someone shared it. The result reads less like a dossier and more like what it is: your half of a set of relationships, written down.

Frequently asked questions

What is the difference between zero-party and first-party data?: Intent. First-party data is observed: a company records your behavior in its own product — pages viewed, items bought — and infers preferences from it. Zero-party data is declared: you state the preference yourself, knowingly. The same fact can arrive both ways; the zero-party version is more accurate about motive and carries explicit consent, while the first-party version captures what you actually did.
Who coined the term zero-party data?: Forrester Research, specifically analyst Fatemeh Khatibloo, in the late 2010s. The firm defined it as data a customer intentionally and proactively shares with a brand — preference data, purchase intentions, personal context. The term spread quickly because it named something the industry needed as privacy regulation tightened: a class of data whose collection is unambiguous and consent-clean.
Why does zero-party data matter for a personal CRM?: Because it draws the ethical line for what belongs in your contact notes: things people told you, knowing you'd remember. A CRM filled only with shared information stays accurate, respects the context in which things were said, and would not embarrass you if a friend read their own entry. Auto-enriched data fails all three tests — which is why some tools refuse to collect it.

Sources

Last updated: 2026-06-10

Tend relationships, not records.

Endearist is a local-first personal CRM. Free up to 25 contacts.

Start free