California Privacy Agency Advances Bold Whistleblower Program to Enforce CCPA Violations

Understanding the CPPA’s Proposed Incentive and Protection Framework The California Privacy Protection Agency (CPPA) is signaling a significant shift in how it plans to enforce the California Consumer Privacy Act (CCPA). On November 7, 2025, the CPPA Board advanced several legislative proposals for the 2026 legislative session, with a comprehensive whistleblower program emerging as one …

Read more California Privacy Agency Advances Bold Whistleblower Program to Enforce CCPA Violations

California AG Secures $530,000 Settlement with Sling TV: A New Phase in CCPA Enforcement

California Attorney General Rob Bonta recently announced a $530,000 settlement with Sling TV, marking the fifth enforcement action by the Attorney General’s office and the eighth overall under the California Consumer Privacy Act (CCPA) since its enactment (See other enforcement actions against: Honda, Todd Snyder, Healthline, among others). The official press release detailing the case is available on the California OAG’s website, and the …

Read more California AG Secures $530,000 Settlement with Sling TV: A New Phase in CCPA Enforcement

CPPA’s $1.35 Million Tractor Supply Settlement: Major CCPA Enforcement Lessons on Opt-Out Rights and Privacy Compliance

On September 26, 2025, the California Privacy Protection Agency (CPPA) Board adopted a Stipulated Final Order imposing a $1.35 million administrative fine against Tractor Supply Company for multiple violations of the California Consumer Privacy Act (CCPA). This enforcement action, announced by the CPPA, represents one of the agency’s most significant settlements to date and offers …

Read more CPPA’s $1.35 Million Tractor Supply Settlement: Major CCPA Enforcement Lessons on Opt-Out Rights and Privacy Compliance

Annual Privacy Policy Updates: From Optional Best Practice to Enforcement Priority

The California Privacy Protection Agency’s recent enforcement action against Tractor Supply Company marks a watershed moment for privacy compliance, elevating routine privacy notice maintenance from administrative oversight to regulatory enforcement priority. The landscape of privacy compliance underwent a significant shift in August 2025 when the California Privacy Protection Agency (CPPA) filed its first judicial action …

Read more Annual Privacy Policy Updates: From Optional Best Practice to Enforcement Priority

CPPA Enforcement Spotlight: Tractor Supply Investigation Highlights Critical CCPA Compliance Lessons

The California Privacy Protection Agency (CPPA) recently made its first public disclosure of an ongoing investigation by filing a petition to enforce a subpoena against Tractor Supply Company. This step underscores the CPPA’s increasing enforcement vigilance and the importance of complying with California’s landmark privacy law, the California Consumer Privacy Act (CCPA). Background: Scope of …

Read more CPPA Enforcement Spotlight: Tractor Supply Investigation Highlights Critical CCPA Compliance Lessons

California’s Record CCPA Settlement with Healthline Highlights Enforcement of Purpose Limitation, Article Title Sensitivity, and Contractual Shortcomings

Healthline agreed to a record $1.55 million CCPA settlement after California’s Attorney General found the company unlawfully shared sensitive article titles and failed to honor consumer opt-outs or maintain compliant contracts with advertisers. California Attorney General Rob Bonta’s $1.55 million settlement with Healthline Media LLC stands as the largest enforcement action under the California Consumer …

Read more California’s Record CCPA Settlement with Healthline Highlights Enforcement of Purpose Limitation, Article Title Sensitivity, and Contractual Shortcomings

Todd Snyder Faces Fine in CPPA Enforcement Action for CCPA Violations

Todd Snyder Faces Fine in CPPA Enforcement Action for CCPA Violations

National clothing retailer Todd Snyder, Inc. (acquired by American Eagle Outfitters in 2015) has been ordered to pay a $345,178 fine and overhaul its privacy practices following a settlement with the California Privacy Protection Agency (CPPA) announced on May 6, 2025. The enforcement action addresses allegations that the company violated the California Consumer Privacy Act …

Read more Todd Snyder Faces Fine in CPPA Enforcement Action for CCPA Violations

Privacy Policy Importance And Is A Lawyer Required

Privacy Policy Importance And Is A Lawyer Required (Updated 2025)

One of the most common questions, especially by newer and smaller businesses, pertains to why having a privacy policy is essential and whether a lawyer is required to draft the privacy policy for their website or app versus the common alternative of using a free privacy policy generator such as through a service like Rocket …

Read more Privacy Policy Importance And Is A Lawyer Required (Updated 2025)

CPPA Enforcement Against Honda Key Lessons for CCPA Privacy Law Compliance

CPPA Enforcement Against Honda: Key Lessons for CCPA Privacy Law Compliance

The California Privacy Protection Agency (CPPA) recently imposed a $632,500 fine against American Honda Motor Co. for violations of the California Consumer Privacy Act (CCPA). This enforcement action—one of the first significant penalties by the CPPA—provides critical insights into the agency’s priorities and expectations for businesses handling consumer data. Core Violations Highlighted in the Case 1. Overcollection of …

Read more CPPA Enforcement Against Honda: Key Lessons for CCPA Privacy Law Compliance

California Expands Definition of Sensitive Information to Include Citizenship or Immigration Status

California Expands Definition of Sensitive Information to Include “Citizenship or Immigration Status”

In a further sign of the increased focus on personal information that is “sensitive,” the California Consumer Privacy Act (CCPA), as amended by the  California Privacy Rights Act (CPRA), has expanded the categories of information deemed sensitive to now include “citizenship or immigration status.” Specifically, in October 2023, Governor Newsom signed Assembly Bill 947. As …

Read more California Expands Definition of Sensitive Information to Include “Citizenship or Immigration Status”