CPPA Announces $1.35M Fine In Tractor Supply Case: What Every Business Should Learn

In September, the California Privacy Protection Agency (CPPA) announced its largest enforcement action to date under the California Consumer Privacy Act (CCPA). Tractor Supply Company, a national retailer with stores across California, will pay $1.35 million and commit to extensive compliance reforms as part of a settlement addressing the CPPA's findings of non-compliance with California privacy law.

The CCPA applies broadly. It covers for-profit businesses that operate in California that either:

1. Earn more than $25 million in annual gross revenues;
2. Buy, sell, or share the personal information of 100,000 or more California residents, households, or devices annually; or
3. Derive at least half of their annual revenue from selling or sharing personal information.