PrivacySignal
Enforcement

California Fines Data Broker for First Time Under Privacy Law

Bloomberg Law News · · International · Enforcement

California has issued its first fine against a data broker under state privacy law, marking an enforcement milestone for a regulatory framework that has been on the books for years.

Why this matters: First-ever enforcements matter because they signal that a law has teeth. Data brokers collect and sell personal information on millions of people, often without those people knowing it. California's law gave residents rights over that data, but rights without enforcement are just words. This fine tells the industry that regulators are finally willing to act. The bigger question is whether it stays a one-off or becomes the start of real, consistent pressure on a business built around trading your information.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

The Attacker Did Not Need to Sleep

Spain received its first reported personal-data breach carried out by an AI agent. The techniques were familiar. The speed and autonomy were not.

· 4 min read Read →

Related stories

Enforcement
The Guardian — Privacy · · International

TikTok drops appeal against £12.7m fine for not keeping under-13s off platform

TikTok has dropped its appeal against a £12.7 million fine issued by the UK's Information Commissioner's Office in 2023. The penalty was imposed after the ICO found TikTok failed to adequately verify users' ages or remove children under 13 from the platform.

Who should care: Lawyers · Privacy officers · Compliance

#enforcement Read original →
Enforcement
K KOAT · · International

Closing arguments delivered in New Mexico data privacy lawsuit against Facebook

Closing arguments have been delivered in a data privacy lawsuit filed by New Mexico against Facebook, bringing the case to its final stage before a verdict. The suit centers on how Facebook handled user data under New Mexico law.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

#enforcement#privacy Read original →
Enforcement
M Malwarebytes · · International

Google’s location data privacy failures draw a €403 million fine

Google has been fined €403 million over failures related to how it handled user location data privacy. The penalty reflects regulatory action against one of the world's largest data collectors for not meeting required privacy standards.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

#enforcement#privacy Read original →
Enforcement
Information Commissioner's Office · · UK

TikTok withdraws two appeals in children’s privacy action and accepts £12.7m fine

TikTok has dropped two appeals against the UK Information Commissioner's Office and agreed to pay a £12.7 million fine related to a children's privacy enforcement action. The company is no longer contesting the ICO's findings in those proceedings.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

#enforcement#privacy Read original →
Enforcement
EDPB · · EU

The Irish Data Protection Commission fines Google 403 000 000 EUR following Inquiry into Google’s processing of location data

Ireland's Data Protection Commission fined Google €403 million on September 21, 2026, following an inquiry into how the company handled location data. The decision included a compliance order and found violations of GDPR rules on lawful processing, data principles, and transparency obligations.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy

#enforcement#gdpr#regulation#privacy Read original →