Penalties can include:
-
Daily fines for failure to register.
-
Per-consumer penalties for failing to delete data.
-
Separate penalties for each missed DROP access cycle.
-
Investigations or enforcement actions by the CPPA.
There is no guaranteed cure period for data brokers.