CPPA

Accessible Deletion Mechanism for Data Brokers

The California Privacy Protection Agency has finalized regulations establishing an Accessible Deletion Mechanism (DROP) for data brokers, effective January 1, 2026. This system allows consumers to request the deletion of their personal information from registered data brokers through a single request to the agency.

CPPA Seeks Comments on Reducing Privacy Rights Friction

The California Privacy Protection Agency (CPPA) is seeking preliminary comments on potential regulatory changes to reduce friction in how consumers exercise their privacy rights. The comment period is open from March 6, 2026, until April 6, 2026.

CPPA Seeks Comments on Opt-out Preference Signals Rulemaking

The California Privacy Protection Agency (CPPA) is seeking preliminary public comments on potential rulemaking regarding Opt-out Preference Signals (OOPS). The agency is gathering information to explore whether regulatory changes are necessary to reduce friction in exercising privacy rights. Comments are due by April 6, 2026.

Data Broker Registration Fee Regulations

The California Privacy Protection Agency (CPPA) is now responsible for the state's data broker registry, effective January 1, 2024. Data brokers must pay an annual registration fee, which the CPPA may adjust. Final regulations for the fee structure have been published for 2024, 2025, and 2026 registrations.

California Adopts CCPA Regulations on Risk Assessments and Cybersecurity

The California Privacy Protection Agency has adopted final regulations updating the CCPA. These regulations implement requirements for risk assessments, annual cybersecurity audits, and consumers' rights regarding automated decision-making technology, effective January 1, 2026.

California Privacy Agency Fines Ford for Opt-Out Process Friction

The California Privacy Protection Agency has fined Ford Motor Company $375,703 and ordered changes to its opt-out process for violating the CCPA. Ford required unnecessary identity verification for consumers opting out of data sales and sharing.

PlayOn Sports Fined $1.10M for Privacy Violations

The California Privacy Protection Agency has fined PlayOn Sports $1.10 million for privacy violations related to student data and targeted advertising. The company must also change its data collection and opt-out practices.

CalPrivacy Launches Data Broker Enforcement Strike Force

The California Privacy Protection Agency (CalPrivacy) has launched a Data Broker Enforcement Strike Force to investigate privacy violations within the data broker industry. This initiative aims to enhance compliance with the CCPA and the Delete Act, building on previous enforcement actions.

CalPrivacy Fines ROR Partners for Data Broker Violations

The California Privacy Protection Agency has fined ROR Partners LLC $56,600 for failing to register as a data broker as required by the Delete Act. The marketing firm was found to have collected and sold extensive consumer data without proper registration, highlighting the agency's focus on data broker compliance.

CalPrivacy Data Broker Registration Enforcement Advisory

CalPrivacy has issued an enforcement advisory reminding data brokers of their registration requirements, including disclosing trade names and websites, and registering independently. Data brokers must register by January 31 annually and face fines of $200 per day for non-compliance.