California Privacy Enforcement Intensifies with New Data Broker Regulations
California is intensifying its enforcement of privacy regulations under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). A new division, the Data Broker Enforcement Strike Force, has been established to ensure compliance within the data broker industry. This initiative is part of a broader effort to address concerns over the misuse of personal information by data brokers. The enforcement includes adherence to the Delete Act, effective January 1, 2026, which mandates data brokers to register, pay a fee, and comply with consumer deletion requests through the Delete Request and Opt-out Platform (DROP). Additionally, the California Attorney General's office has settled with a mobile app gaming company for $1.4 million due to non-compliance with CCPA opt-out requirements, particularly concerning the sale of minors' information without consent. 
