California’s Delete Act enforcement is expanding under the California Privacy Protection Agency (CalPrivacy), which recently adopted new regulations clarifying the definition of a “data broker,” potentially capturing companies that never saw themselves as brokers. CalPrivacy has taken enforcement actions against firms that failed to register, imposed penalties, and issued an advisory warning that affiliates must register separately and include all trade names and websites to comply with registration requirements.

