HOT OFF THE PRESSES: CalPrivacy Brings First Action Against a Data Broker Under Both the CCPA and Delete Act
California's privacy regulator has filed its first enforcement action against a data broker under both the California Consumer Privacy Act and the Delete Act, marking a significant step in the state's use of its data broker oversight tools.
Why this matters: Data brokers collect and sell personal information about millions of people who never chose to deal with them. California gave residents the right to demand deletion of that data, and then passed the Delete Act to make the process harder to dodge. This first enforcement action is the regulator actually using those tools. That matters because laws without enforcement are just suggestions. If CalPrivacy follows through with real penalties, data brokers have a reason to comply. If it does not, the Delete Act becomes another rule companies wait out.
Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.