California Data Broker Developments

Recent Data Broker Enforcement Actions

California regulators are penalizing data brokers with significant fines following the launch of the new Delete Request and Opt-Out Platform (DROP). DROP is a tool that allows California consumers to submit a single request to delete their personal information and stop its sale across all registered data brokers. In August and September 2026, CalPrivacy (the California Privacy Protection Agency) penalized three companies, LocateSmarter, Cybba, and SalesIntel Research for failing to register or timely register as data brokers. On August 11, CalPrivacy announced its first action under the Delete Act, ordering LocateSmarter to pay a $116,490 penalty for failing to register as a data broker and for violations of the California Consumer Privacy Act’s (CCPA) consumer opt-out requirements. Shortly thereafter, CalPrivacy announced an enforcement action against Cybba, which agreed to pay a $52,400 fine for registering late and on September 1, 2026, the