Joining Vermont, California will now require data brokers to
register with the California Attorney General. The law was signed
October 11, 2019. It applies to companies that
"knowingly" collect and sell personal information about
consumers with whom they do not have a "direct
relationship." They must register with the AG by January 31,
2020.
For purposes of the law, a sale is defined as it is under CCPA.
Namely, giving personal information to third parties either for
money or for "other valuable consideration." The authors
of the law compare data brokers and more typical ecommerce
businesses. With the former, the consumer does not know about the
company's use of her information or how to control
that use.
