Enforcement action · California Privacy Protection Agency
[CA CPPA] California Privacy Protection Agency Announces Joint Investigative Privacy Sweep
[CA CPPA] California Privacy Protection Agency Announces Joint Investigative Privacy Sweep is an AI-related enforcement action involving California Privacy Protection Agency. The California Privacy Protection Agency, alongside Colorado and Connecticut Attorneys General, announced a joint investigative sweep into businesses failing to honor Global Privacy Control (GPC) opt-out signals for personal information.
Action details
- Agency
- California Privacy Protection Agency
- Jurisdiction
- CA
- Enforcement type
- investigation
- Document type
- enforcement action
- Effective
- 2025-09-09
- Topic
- ai privacy
Summary
The California Privacy Protection Agency (CPPA), in collaboration with the Attorneys General of California, Colorado, and Connecticut, has launched an investigative sweep targeting businesses that may not be honoring Global Privacy Control (GPC) signals. GPC is a browser setting allowing consumers to automatically opt-out of the sale or sharing of their personal information. The sweep emphasizes that compliance with consumer opt-out requests, as mandated by laws like the CCPA, is legally required and non-negotiable. This action signals increased multi-state enforcement on digital privacy rights.
Primary source
https://cppa.ca.gov/announcements/2025/20250909.html →Related California Privacy Protection Agency actions
- [CA CPPA] Minnesota and New Hampshire Join Bipartisan Consortium as Privacy Collaboration Continues Growing Nationwide agency report 10/8/2025
- Jerico Pictures, Inc., d/b/a National Public Data enforcement action 5/8/2025
- California Privacy Protection Agency v. Tractor Supply Company enforcement action 8/6/2025
- [CA CPPA] CalPrivacy Launches Data Broker Enforcement Strike Force agency report 11/19/2025
- [CA CPPA] CPPA Brings Enforcement Action Against Florida Data Broker enforcement action 2/20/2025
Frequently asked questions
- What is [CA CPPA] California Privacy Protection Agency Announces Joint Investigative Privacy Sweep?
- The California Privacy Protection Agency (CPPA), in collaboration with the Attorneys General of California, Colorado, and Connecticut, has launched an investigative sweep targeting businesses that may not be honoring Global Privacy Control (GPC) signals. GPC is a browser setting allowing consumers to automatically opt-out of the sale or sharing of their personal information. The sweep emphasizes that compliance with consumer opt-out requests, as mandated by laws like the CCPA, is legally required and non-negotiable. This action signals increased multi-state enforcement on digital privacy rights. Primary source →
- Which agency brought the action?
- California Privacy Protection Agency brought this enforcement action in CA. Primary source →
- What was the penalty?
- No specific penalty amount is disclosed in the primary source AIGI tracked for this action. Some enforcement actions resolve through injunctive relief, consent decrees, or behavioural undertakings rather than monetary penalty. Primary source →
- When did the action take effect?
- The action was effective 2025-09-09. Primary source →
- Where can I find the primary source?
- The primary source for [CA CPPA] California Privacy Protection Agency Announces Joint Investigative Privacy Sweep is at https://cppa.ca.gov/announcements/2025/20250909.html. AIGI does not paraphrase secondary commentary — every claim on this page links back to that primary source. Primary source →
Related
Stay informed