Court Rules
All enforcement actions
SettlementHigh Risk

CA AG Settles Jam City for $1.4M Over Child Data Opt-Outs

Jam City, Inc.November 21, 2025California Attorney General

Penalty Amount

$1,400,000

Summary

California Attorney General Rob Bonta announced a $1.4 million settlement with mobile gaming company Jam City, Inc. for violating the CCPA by failing to provide consumers with compliant methods to opt out of the sale or sharing of their personal information across its 21 mobile apps. The settlement also resolves allegations that Jam City sold or shared personal data of users aged 13 to 16 without the required affirmative opt-in consent. In addition to the civil penalty, Jam City must implement in-app opt-out methods and obtain opt-in consent for minor users' data sales and sharing.

Remedy

Jam City must pay $1.4 million in civil penalties. The company is also required to provide in-app methods for consumers to opt out of the sale or sharing of their personal information, and must not sell or share the personal information of users aged 13 to 15 (at least 13 and less than 16 years old) without obtaining their affirmative opt-in consent.

Monetary PenaltyInjunction

Contract Impact

In-house legal teams should review end-user license agreements (EULAs), privacy policies, and mobile app terms of service to ensure they include CCPA-compliant, easily accessible in-app methods for consumers to opt out of the sale or sharing of their personal information. Vendor agreements with ad-tech partners, advertising networks, and other third-party data recipients must be updated to prohibit the sale or sharing of personal information belonging to users aged 13 to 15 without first obtaining affirmative opt-in consent, and to require such partners to honor all consumer opt-out requests. Additionally, all agreements involving the collection of personal information from minors should include explicit clauses for age verification and adherence to CCPA minor data protections, while data processing agreements should include audit provisions to confirm ongoing compliance with opt-out and consent requirements.

Contract Search Terms

opt-out mechanismsale of personal informationsharing of personal informationaffirmative opt-in consentminor consentin-app privacy controlschildren's datadata processing agreement

Laws Cited

Violation Types

Entity Details

Entity

Jam City, Inc.

Also known as: Jam City

Industry

Gaming

Official Sources

Source Evidence

Entity Name
"Jam City, Inc."
Fine Amount
"$1.4 million in civil penalties"
Laws Cited
"California Consumer Privacy Act (CCPA)"
Violation Types
"failing to offer consumers methods to opt-out of the sale or sharing of their personal information"
Violation Types
"shared or sold the data of children between the age of 13 to 16 without the affirmative consent required by the CCPA"
Event Date
"Friday, November 21, 2025"

Related Enforcement Actions

CA

Paramount Skydance Corporation

A coalition of 12 state attorneys general, led by Colorado AG Phil Weiser, obtained a temporary restraining order from a federal court in California to halt the proposed $110 billion merger of Warner Bros. Discovery, Inc. by Paramount Skydance Corporation. The lawsuit alleges the merger violates Section 7 of the Clayton Act by substantially lessening competition in film distribution, anticipated blockbuster film distribution, and licensing cable TV channels.

CA

California Privacy Protection Agency

The California Privacy Protection Agency (CalPrivacy) joined a coalition of 18 Attorneys General and state agencies in opposing the proposed SECURE Data Act, a federal privacy bill that would preempt stronger state privacy laws like the CCPA. The coalition argues the bill would weaken consumer privacy protections, limit enforcement remedies, and undermine California's Delete Request and Opt-out Platform (DROP).

CA

General Motors

$12.8M

California Attorney General Rob Bonta, along with multiple district attorneys and the California Privacy Protection Agency, announced a $12.75 million settlement with General Motors for illegally selling hundreds of thousands of Californians' location and driving data to data brokers Verisk and LexisNexis without notice or consent. The settlement includes the largest CCPA penalty to date, a five-year ban on selling driving data to consumer reporting agencies, and requirements to delete retained data and implement a robust privacy program.

CA

California Privacy Protection Agency

The California Privacy Protection Agency Board voted to support two bills (AB 1542 and SB 1106) and took a 'support if amended' position on a third bill (AB 883). These bills aim to strengthen privacy protections by expanding sensitive data protections, improving deletion rights under the Delete Act, and providing expedited deletion for elected officials and judges.

CA

California Privacy Protection Agency

The California Privacy Protection Agency sent a letter to Congress opposing the SECURE Data Act, a federal bill that would preempt state privacy laws like the CCPA and Delete Act. The letter argues the bill would eliminate rights for 40 million Californians, including the DROP platform and opt-out preference signal requirements, and urges Congress to set a floor rather than a ceiling on privacy protections.

CA

Nexstar Media Group, Inc. and Tegna Inc.

California Attorney General Rob Bonta, joined by attorneys general from seven other states, filed a lawsuit to block the $6.2 billion merger between Nexstar Media Group and Tegna Inc. The lawsuit alleges the merger violates Section 7 of the Clayton Act by reducing competition in local TV markets, leading to higher prices, less local news, and job losses.