PrivacySignal
News

Data broker to pay $116,000 for violating CPPA, Delete Act

MLex · · International · Privacy Law

A data broker has agreed to pay $116,000 to settle violations of the California Consumer Privacy Act and the Delete Act, in an enforcement action by the California Privacy Protection Agency. The case marks one of the early uses of the Delete Act, which requires data brokers to honor deletion requests made through a central state-run system.

Why this matters: One hundred sixteen thousand dollars sounds like a lot until you remember data brokers make money selling personal information about millions of people. For most of them, a fine this size is a cost of doing business. What matters more here is the Delete Act enforcement piece. California built a single deletion system so people do not have to track down hundreds of brokers one by one. Whether that system actually has teeth depends on whether regulators keep using it, and whether fines get bigger when companies ignore it.

Who should care: General readers · Privacy officers · Policy

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

The Attacker Did Not Need to Sleep

Spain received its first reported personal-data breach carried out by an AI agent. The techniques were familiar. The speed and autonomy were not.

· 4 min read Read →

Related stories

News
BleepingComputer · · International

Rydox marketplace admin pleads guilty, faces 22 years in prison

A Kosovar national has pleaded guilty to operating Rydox, a large illegal online marketplace that sold stolen personal information, login credentials, credit card details, and cybercrime tools. [...]

Who should care: General readers · Privacy officers · Policy

News
The Record · · International

Rydox cybercriminal marketplace operator pleads guilty following co-conspirator brothers’s deportation

Ardit Kutleshi, 28, was extradited from his home country of Kosovo last year after prosecutors accused him and his older brother of running Rydox — an illicit platform used by cybercriminals to sell stolen personal information, illegal access to devices and other tools for carrying out fraud.

Who should care: General readers · Privacy officers · Policy