Share on LinkedInShare on LinkedIn

ARTICLE · 14 JANUARY 2026

CalPrivacy Escalates Data Broker Enforcement Into Health Data, Large Multinationals

Frankfurt Kurnit Klein & Selz PC
Frankfurt Kurnit Klein & Selz PC
Contributor
Frankfurt Kurnit Klein & Selz PC

Frankfurt Kurnit Klein & Selz PC

Founded more than 40 years ago as a boutique law firm servicing the entertainment and arts...

View firm profile
Explore more from Frankfurt Kurnit Klein & Selz PC

The California Privacy Protection Agency kicked off 2026 by announcing two new enforcement actions that show continued expansion of enforcement scope, escalating remedies, and sustained focus on health data.

United StatesPrivacy

The California Privacy Protection Agency kicked off 2026 by announcing two new enforcement actions that show continued expansion of enforcement scope, escalating remedies, and sustained focus on health data. If not abundantly clear by now, a significant portion of CalPrivacy's energy has shifted to regulating data brokers.

Datamasters

In the first matter, CalPrivacy alleged that Datamasters, a mailing list targeting company, failed to register as a data broker. While the core violation mirrors prior cases, the order reveals a few notable points:

  1. CalPrivacy alleged that Datamasters bought and sold sensitive health information relating to rare medical conditions for targeted advertising purposes. In this way, the allegations draw clear parallels to the California Attorney General's Healthline settlement. Although California privacy law ostensibly treats all health information as equally sensitive, enforcement practice suggests regulators apply heightened

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

www.fkks.com

This post first appeared in Frankfurt Kurnit's Focus on the Data blog (www.focusonthedata.com). It provides general coverage of its subject area. We provide it with the understanding that Frankfurt Kurnit Klein & Selz is not engaged herein in rendering legal advice, and shall not be liable for any damages resulting from any error, inaccuracy, or omission. Our attorneys practice law only in jurisdictions in which they are properly authorized to do so. We do not seek to represent clients in other jurisdictions.

Originally published by the New York Legal Ethics Reporter

www.fkks.com

This alert provides general coverage of its subject area. We provide it with the understanding that Frankfurt Kurnit Klein & Selz is not engaged herein in rendering legal advice, and shall not be liable for any damages resulting from any error, inaccuracy, or omission. Our attorneys practice law only in jurisdictions in which they are properly authorized to do so. We do not seek to represent clients in other jurisdictions.

www.fkks.com

This alert provides general coverage of its subject area. We provide it with the understanding that Frankfurt Kurnit Klein & Selz is not engaged herein in rendering legal advice, and shall not be liable for any damages resulting from any error, inaccuracy, or omission. Our attorneys practice law only in jurisdictions in which they are properly authorized to do so. We do not seek to represent clients in other jurisdictions.

See more popular content from