Additional Data Brokers Settle With CPPA

SACRAMENTO – The Enforcement Division of the California Privacy Protection Agency (CPPA) has reached settlements with two additional data brokers—PayDae, Inc., doing business as “Infillion,” and The Data Group, LLC—for failing to register and pay an annual fee as required by Senate Bill 362. The CPPA's Board voted unanimously to approve the settlements during a closed session of its December 19, 2024 meeting.

This is the third wave of enforcement activity against data brokers within the past 60 days. On October 30, the Enforcement Division announced an investigative sweep of data broker registration compliance. Shortly afterward, on November 14, the Enforcement Division announced settlements with two data brokers. These additional two settlements followed, bringing the total number of settled actions to four.

Infillion, a New York-based data broker, will pay $54,200 to resolve the Enforcement Division's claims that the company failed to register between February 1 and November 4, 2024. The Data Group, a Florida-based data broker, will pay $46,600 to resolve the Enforcement Division's claims that the company failed to register between February 1 and September 20, 2024. In addition to the fines, both companies agreed to injunctive terms.

The Delete Act imposes fines of $200 per day for failing to register by the deadline. It was authored by Senator Josh Becker and signed into law by Governor Gavin Newsom in 2023. “We can't have data brokers flying under the radar,” said CPPA's head of enforcement, Michael Macko. “These businesses present a special risk to privacy because they traffic in our personal information. We will continue to enforce the law vigorously.”

The next registration deadline is fast approaching for data brokers who were active in 2024. Data brokers must disclose practice-specific information, pay the annual fee (now $6,600), and register on the CPPA's website between January 1-31, 2025 if they operated as a data broker in 2024. More information on data broker registration is available here.

About Us

The California Privacy Protection Agency (CPPA) is committed to promoting the education and awareness of consumers' privacy rights and businesses' responsibilities under the California Consumer Privacy Act.

Individuals can visit privacy.ca.gov to access helpful and up-to-date information on how to exercise their rights and protect their personal information. In addition, the Agency's website provides important information about CPPA board meetings, announcements, and the rulemaking process.