California Puts Data Brokers On Notice

“In a tentative ruling issued August 21, 2026, the California Court of Appeal rejected the categorical argument that CIPA’s pen-register provisions apply only to telephone systems, while also concluding that IP-address collection alone does not establish a valid pen-register claim.”

Mondaq and 1 other article

if signed or if the Governor declines to act

“The bill has not yet been signed. Governor Gavin Newsom has until September 30, 2026, to act. If signed, or if the Governor declines to act, SB 690 would take effect January 1, 2027.”

Legal500

“The bill has not yet been signed. Governor Gavin Newsom has until September 30, 2026, to act. If signed, or if the Governor declines to act, SB 690 would take effect January 1, 2027.”

Legal500

Delete Act and CCPA violations

“The California Privacy Protection Agency (CalPrivacy) announced its first enforcement action against a data broker under the California Consumer Privacy Act (CCPA), fining Iowa-based LocateSmarter LLC $116,490.”

Lexology

LocateSmarter stipulated final order

“The stipulated final order requires LocateSmarter to pay $30,600 for the Delete Act violation and $79,890 for the CCPA violations. It must register as a data broker, disclose metrics about CCPA requests, process deletion requests submitted through DROP, and make its opt-out process easy and minimally burdensome.”

Lexology