Enforcement action · California Privacy Protection Agency

[CA CPPA] CalPrivacy Launches Data Broker Enforcement Strike Force

[CA CPPA] CalPrivacy Launches Data Broker Enforcement Strike Force is an AI-related enforcement action involving California Privacy Protection Agency. CalPrivacy launched a Data Broker Enforcement Strike Force to investigate privacy violations and enforce compliance with the CCPA and Delete Act, highlighting recent fines and upcoming deletion platform.

Action details

Agency
California Privacy Protection Agency
Jurisdiction
CA
Enforcement type
investigation
Document type
agency report
Effective
2025-11-19
Topic
ai privacy

Summary

The California Privacy Protection Agency (CalPrivacy) has formed a Data Broker Enforcement Strike Force to ramp up investigations into privacy violations by the data broker industry. The Strike Force will ensure compliance with the Delete Act's registration requirements and the California Consumer Privacy Act (CCPA). This initiative follows previous enforcement actions against companies like Tractor Supply, Todd Snyder, American Honda, Background Alert, and Accurate Append, resulting in significant fines and required changes to business practices. The agency also announced the Delete Request and Opt-Out Platform (DROP) will launch in January 2026, allowing consumers to collectively request data deletion from all registered data brokers.

Primary source

https://cppa.ca.gov/announcements/2025/20251119.html →

Frequently asked questions

What is [CA CPPA] CalPrivacy Launches Data Broker Enforcement Strike Force?
The California Privacy Protection Agency (CalPrivacy) has formed a Data Broker Enforcement Strike Force to ramp up investigations into privacy violations by the data broker industry. The Strike Force will ensure compliance with the Delete Act's registration requirements and the California Consumer Privacy Act (CCPA). This initiative follows previous enforcement actions against companies like Tractor Supply, Todd Snyder, American Honda, Background Alert, and Accurate Append, resulting in significant fines and required changes to business practices. The agency also announced the Delete Request and Opt-Out Platform (DROP) will launch in January 2026, allowing consumers to collectively request data deletion from all registered data brokers. Primary source →
Which agency brought the action?
California Privacy Protection Agency brought this enforcement action in CA. Primary source →
What was the penalty?
No specific penalty amount is disclosed in the primary source AIGI tracked for this action. Some enforcement actions resolve through injunctive relief, consent decrees, or behavioural undertakings rather than monetary penalty. Primary source →
When did the action take effect?
The action was effective 2025-11-19. Primary source →
Where can I find the primary source?
The primary source for [CA CPPA] CalPrivacy Launches Data Broker Enforcement Strike Force is at https://cppa.ca.gov/announcements/2025/20251119.html. AIGI does not paraphrase secondary commentary — every claim on this page links back to that primary source. Primary source →

Stay informed

Get every California Privacy Protection Agency AI enforcement update.

Start 14-day trial →