In the California Privacy Protection Agency’s (CPPA) latest enforcement action, Accurate Append, Inc. will pay a $55,400 fine related to allegations that it failed to fulfill its registration obligations. This settlement is the eighth action taken against a data broker since the CPPA launched its investigative enforcement sweep under the California Delete Act.

The Delete Act requires entities that collect and sell consumers’ personal information with whom they do not have a direct relationship to register with the CPPA by January 31st of each year and pay an annual fee. Failure to register could result in fines of $200 per day. The Delete Act also requires certain data deletion and disclosure obligations.

According to the CPPA, Accurate Append failed to register for last year’s data broker activities by the January 31st deadline; the company only registered on November 4, 2024, after the CPPA contacted Accurate Append during its investigation. Based on this failure, Accurate Append will pay the fine and cover costs for attorney’s fees incurred by the CPPA.

Michael Macko, head of the CPPA’s Enforcement Division, stated, “This settlement shows, once again, the peril faced by data brokers who fail to register. [The CPPA is] committed to bringing transparency to the data broker industry, and vigorous enforcement of California’s registration requirement is one way to do that.”

The registration fee—$6,600—is set to fund the data broker registry and the new mechanism for Delete Act compliance, which will allow consumers to direct all data brokers to delete their information in one, single request. The new mechanism, the Delete Request and Opt-Out Platform, will be available to consumers next year. 

This latest enforcement action against Accurate Append underscores the CPPA’s commitment to holding data brokers accountable under the Delete Act. As the CPPA continues to build momentum in its oversight efforts, the $55,400 fine serves as a clear warning to companies that fail to comply with registration and transparency requirements.

With the upcoming launch of the Delete Request and Opt-Out Platform, consumers will soon gain greater control over their personal data, reinforcing the state’s leading role in privacy protection.