California Privacy Protection Agency

The California Privacy Protection Agency (CPPA) Enforcement Division continued its flurry of enforcement actions by reaching a settlement with American Honda Motor Co. over violations of the California Consumer Privacy Act (CCPA). To resolve the allegations, Honda agreed to implement a new and simpler process for Californians to assert their privacy rights?and pay a $630k+ fine. This marks the first-ever CCPA enforcement action that includes a UX designer and A/B testing in the settlement terms, highlighting the Agency’s focus on changing business practices to protect Californians’ privacy.?? This settlement serves as a clear warning to companies handling Californians’ personal information—compliance is not optional. Tiffany Garcia, the Agency’s Interim Executive Director, reinforced the CPPA’s commitment to enforcement, adding: “The CPPA’s mission is to protect privacy for all Californians. We are dedicated to holding businesses accountable when their practices threaten Californians’ privacy rights.” For more information on the settlement, read the full announcement: https://lnkd.in/dCXB_utg

The CPPA is recruiting a skilled and experienced Research Technologist to join the Enforcement Division. As an expert advisor, you will support investigations and enforcement actions related to California’s privacy laws. In this role, you will: - Research and analyze privacy technologies and business practices - Support investigations and enforcement actions related to privacy violations - Develop tools and methods for privacy investigations - Prepare investigative reports Join us and make a meaningful impact on privacy enforcement at the nation's first regulator fully dedicated to consumer privacy. Learn more and apply by 3/18 https://lnkd.in/geTgzRBQ

Our latest blog post is live! It features the CPPA’s first annual report, a reflection of the Agency’s accomplishments and unwavering commitment to protecting Californians’ privacy rights. The report reflects our mission to empower Californians, promote transparency, and drive collaboration to safeguard privacy rights. Read the blog now: https://loom.ly/Y2R6LJQ

ICYMI: The CPPA was featured in @WashingtonPost - Tech Friend highlighting the Agency’s leadership in data privacy enforcement and California’s strong privacy protections. As the newsletter states, starting next year, Californians will be able to request all registered data brokers delete their personal information in one step by using the Delete Requests and Opt-Out Platform (DROP), mandated by the Delete Act. Read more: https://loom.ly/lZe9mpA

The Enforcement Division of the California Privacy Protection Agency (CPPA) reached a settlement with the data broker Background Alert, requiring the company to shut down its operations through 2028 or face a $50,000 fine. Background Alert, which promoted its business by saying, “It’s scary how much information you can dig up on someone,” failed to register with the CPPA as a data broker as required by the Delete Act.? The company sold profiles about consumers that contained inferences drawn from public records, underscoring that these inferences can constitute “personal information” under California’s comprehensive privacy law and the Delete Act. This is the CPPA’s latest action in an ongoing investigative sweep of data broker compliance and highlights the Agency’s commitment to protecting consumer privacy. For more information on the settlement, read the full announcement: https://lnkd.in/ekErKMeG?

Join CPPA as Chief Privacy Auditor at the nation’s first agency dedicated to protecting consumers' privacy rights! Under the guidance of the Executive Director and CPPA Board, you'll leverage your expertise in privacy and technology to build the Agency's Audits Division from the ground up. In this role, you will: ??Develop and oversee the independent auditing function of the nation’s first privacy agency; ??Lead a team of experts in the Audits Division who will evaluate and provide guidance on privacy-related business practices and cutting-edge technologies; ??Support high-impact enforcement investigations and help ensure compliance with the law. Bring your technical and leadership acumen to the California Privacy Protection Agency to help protect the privacy rights of millions of Californians. Learn more and apply by March 6: https://loom.ly/E7q5TLM

Our first ever Annual Report is here! ?? Explore how we’ve strengthened privacy protections for Californians, launched groundbreaking initiatives, and shaped privacy laws for the future. Read the full report: https://lnkd.in/ezf5Aqzg.??

The 2025 Data Broker Registry is live! California residents can visit https://lnkd.in/gGypHvDZ to view registered data brokers and contact them to exercise their CCPA rights. You can check the 2025 registry for data broker contact information and submit requests directly to the company. Starting January 2026, you’ll be able to submit a single request to the CPPA to delete your information from all registered data brokers. To learn more about your privacy rights, visit privacy.ca.gov.?

The CPPA Board will hold a public meeting on March 6, 2025 and March 7, 2025. Information on how to attend the meeting and the meeting agenda can be found at https://lnkd.in/gCBYT9SK.

The CPPA has brought an enforcement action seeking a $46,000 fine against Florida-based data broker National Public Data for failing to register with the Agency, as required by the Delete Act. This is the sixth action CPPA’s Enforcement Division has taken since announcing an enforcement sweep of data broker registration late last year. Read more:?https://lnkd.in/gAT95Q7v