California Privacy Enforcement Database

Database

California Privacy Enforcement Actions 24

Last updated June 1st, 2026

Every public CCPA and CPRA enforcement matter we can verify against a primary source — CPPA orders, AG press releases, court filings, and stipulated judgments. Sortable, filterable, and citable.

Actions tracked

0 pending

Penalties collected

—

across resolved matters

Largest single action

—

Actions, last 12 mo

—

to June 1st, 2026

Trends

Penalties over time

Stacked by action, grouped by resolution quarter; pending matters use filing quarter. Each segment is one matter's headline civil penalty.

Filter by category

Connected vehicles Data brokers Sensitive PI Minors Opt-out / GPC Geolocation Service providers Deletion / DSAR Health data AI inferences Dark patterns Cookie banner Financial incentives Employee PI Breach-adjacent

24 actions

Sort by

Resolved ↓	Respondent	Agency	Categories	Penalty	Status
Mar 5, 2026	Ford Motor Company Opt-out friction via email verification	CPPA	opt out dark patterns connected vehicles +1	$375.7K	Settled
Mar 3, 2026	PlayOn Sports GoFan ticketing, student tracking for ads	CPPA	minors opt out dark patterns +2	$1.1M	Settled
Feb 11, 2026	The Walt Disney Company Fragmented opt-out across devices and streaming services	CA AG	opt out gpc dark patterns +1	$2.75M	Settled
May 11, 2026	General Motors OnStar Smart Driver program	CPPA + AG	connected vehicles sensitive pi geolocation +1	$12.75M	Settled
Feb 1, 2026	ROR Partners LLC Failure to register as data broker; consumer profiling	CPPA	data brokers delete act ai inference	$56.6K	Settled
Jan 8, 2026	S&P Global Failure to register as data broker	CPPA	data brokers delete act	$62.6K	Settled
Jan 8, 2026	Rickenbacher Data LLC (Datamasters) Failure to register as data broker; sensitive list sales	CPPA	data brokers sensitive pi delete act	$45.0K	Settled
Nov 21, 2025	Jam City No in-app opt-outs across 21 mobile games; minor data sales	CA AG	opt out minors	$1.4M	Settled
Oct 30, 2025	Sling TV / Dish Media Sales Opt-out friction, cookie conflation, no in-app opt-out, minors	CA AG	opt out dark patterns minors +1	$530.0K	Settled
Sep 30, 2025	Tractor Supply Company Privacy notices, job applicant rights, opt-out, vendor contracts	CPPA	privacy notice employee opt out +2	$1.35M	Settled
Jul 29, 2025	Accurate Append Failure to register as data broker	CPPA	data brokers delete act	$55.4K	Settled
Jul 1, 2025	Healthline Media LLC Health article tracking, opt-out failures, purpose limitation	CA AG	health sensitive pi opt out +3	$1.55M	Settled
May 6, 2025	Todd Snyder Opt-out portal misconfiguration, excessive verification	CPPA	opt out dark patterns cmp	$345.2K	Settled
Mar 12, 2025	American Honda Motor Co. Opt-out friction, asymmetric UI, authorized agents, vendor contracts	CPPA	opt out dark patterns connected vehicles +1	$632.5K	Settled
Feb 27, 2025	Background Alert Failure to register as data broker; operational shutdown	CPPA	data brokers delete act ai inference	$0.0K	Settled
May 8, 2025	Jerico Pictures (National Public Data) Failure to register as data broker	CPPA	data brokers delete act	$46.0K	Settled
Jan 29, 2025	Key Marketing Advantage (KMA) Failure to register as data broker	CPPA	data brokers delete act	$55.8K	Settled
Dec 23, 2024	The Data Group Failure to register as data broker	CPPA	data brokers delete act	$46.6K	Settled
Dec 23, 2024	PayDae (Infillion) Failure to register as data broker	CPPA	data brokers delete act	$54.2K	Settled
Nov 14, 2024	UpLead Failure to register as data broker	CPPA	data brokers delete act	$34.4K	Settled
Nov 14, 2024	Growbots Failure to register as data broker	CPPA	data brokers delete act	$35.4K	Settled
Jun 18, 2024	Tilting Point Media LLC SpongeBob app; SDK misconfiguration; children's data	CA AG	minors ai inference	$500.0K	Settled
Feb 21, 2024	DoorDash Marketing cooperative data sale; no notice or opt-out	CA AG	opt out vendor privacy notice	$375.0K	Settled
Aug 24, 2022	Sephora Third-party tracking pixels as sale; GPC ignored	CA AG	opt out gpc cookie banner +2	$1.2M	Settled

Penalty amounts reflect the headline civil-penalty figure in the operative resolution document. Where injunctive relief or compliance cost components are reported separately, they are noted on the action's detail page.