Businesses that qualify as data brokers in California may be required to comply with several regulatory obligations.
These may include:
-
Registering annually with the California Privacy Protection Agency (“CPPA”).
-
Paying a required registration fee.
-
Providing disclosures about data broker activities.
-
Responding to consumer deletion or opt-out requests where applicable.
The California Delete Act also introduces requirements intended to simplify consumer requests to delete personal information held by data brokers.
Organizations that meet the definition of a data broker should ensure that registration and governance procedures are implemented and documented.
For operational guidance and structured compliance documentation tools, visit the CLIClaw Data Broker Compliance Library.
This FAQ is provided for general informational purposes only and is not legal advice. It is intended as a starting point for understanding the issues discussed and should not be relied on as a substitute for advice from qualified legal counsel.