The California Privacy Protection Agency (CPPA) has stepped up enforcement against data brokers that fail to register under the state’s Delete Act. Since an investigative sweep began in October 2024, CalPrivacy has pursued multiple actions, including fines and orders against Datamasters and S&P Global for not registering and complying with data broker requirements. These cases highlight the significant legal and financial risks for businesses that must register as data brokers but do not do so.
