On February 27, the California Privacy Protection Agency (CPPA) announced it reached a settlement with a data broker company that failed to register and pay an annual registration fee as required under the Delete Act. The CPPA alleged the data broker created and sold consumer profiles about people online, drawing from billions of public records to generate these profiles. The company allegedly failed to register as a data broker by the required deadline, leading to the enforcement action. The CPPA emphasized protections under California’s law protecting consumers’ personal information, including inferences that businesses use to profile them. The registration and annual fees required from data brokers fund the development of a deletion mechanism, known as the Delete Request and Opt-Out Platform, that are reportedly set to be available to consumers in 2026. The settlement mandated the company cease its operations until 2028 or face a $50,000 penalty. According to the CPPA, this action was part of an ongoing investigation into data broker registration compliance that began in October 2024.
