Un-broker my heart, a late amendment to the CCPA has added data broker registration to the mix.

All data brokers as defined in amendment AB-1202 are required to:

  • register with the Attorney General on or before January 31 following each year in which a business meets the definition of data broker. This means disclosing their name and any additional information or explanation the data broker chooses to provide concerning its data collection practices.
  • pay a registration fee

Who’s covered: any business that knowingly collects and sells to third parties the personal information of a consumer with whom the business does not have a direct relationship

Who’s not covered:

  • consumer reporting agency to the extent covered by FCRA
  • financial institution to the extent covered by GLBA
  • entity to the extent covered by the Insurance Information and Privacy Protection Act

Consequences for failing to register:

  • injunction and civil penalties, fees and costs to the tune of $100 for each day the data broker fails to register and;
  • fees that were due and;
  • expenses incurred by the Attorney General in the investigation and prosecution of the action.

Read the full text of the amendment.