Penalty Amount
$375,703
The California Privacy Protection Agency settled with Ford Motor Company for $375,703 after finding that Ford violated the CCPA by requiring email verification for opt-out requests, creating unnecessary friction. Ford must implement easier opt-out methods, conduct a website audit, and comply with global privacy controls.
Ford must pay a $375,703 fine, change its business practices to provide easy opt-out requests with minimal steps, conduct an audit of tracking technologies on its website, and ensure compliance with opt-out preference signals like Global Privacy Control.
In-house legal teams should review all customer-facing agreements, including privacy policies, terms of service, and data processing addendums. Focus on clauses governing opt-out rights for the sale/sharing of personal information, identity verification procedures, and compliance with preference signals like Global Privacy Control. Specific changes needed include removing mandatory email verification steps for opt-out submissions, ensuring opt-out methods are accessible with minimal steps, and auditing tracking technologies to guarantee alignment with CCPA's requirement to honor user preference signals. Vendor contracts may also need updates to reflect these simplified processes.
Entity
Ford Motor Company
Also known as: Ford
Industry
AutomotiveOfficial Press Release
https://privacy.ca.gov/2026/03/ford-to-change-practices-pay-fine-for-adding-unnecessary-friction-to-opt-out-process/
Order of Decision Ford Motor Co
https://privacy.ca.gov/wp-content/uploads/sites/357/2026/03/Order-of-Decision-Ford-Motor-Co.pdf
California Privacy Protection Agency Enforcement Page
https://cppa.ca.gov/enforcement/
$376K
The California Privacy Protection Agency (CalPrivacy) settled with Ford Motor Company requiring the company to pay a $375,703 fine and change its practices. Ford violated the CCPA by requiring consumers to complete an email verification step before they could opt-out of the sale and sharing of their personal information collected through digital properties and connected vehicle services. In addition to the fine, Ford must provide easy methods to submit opt-out requests with minimal steps, audit its tracking technologies, and ensure compliance with opt-out preference signals including Global Privacy Control.
$19.2M
Ford Motor Company agreed to a $19.2 million multistate settlement for falsely advertising the fuel economy of 2013–2014 C-Max hybrids and the payload capacity of 2011–2014 Super Duty pickup trucks. The settlement requires Ford to cease deceptive advertising practices and pay penalties to participating states.
The California Privacy Protection Agency announced that over 300,000 Californians have signed up for the Delete Request and Opt-out Platform (DROP) since its launch five months ago. The Data Broker Registry now includes 581 registered data brokers, the highest number since the registry was established in 2020. Beginning August 1, 2026, all data brokers will be required to access DROP and process deletion requests.
The California Privacy Protection Agency launched a statewide roadshow to promote its Delete Request and Opt-out Platform (DROP), which allows California residents to request deletion of their personal information from all registered data brokers in a single request. The roadshow aims to increase awareness of data privacy rights and the DROP tool, which data brokers are legally required to process starting August 1, 2026.
$1.1M
The California Privacy Protection Agency settled with PlayOn Sports for $1.10 million over CCPA violations, including failing to provide adequate opt-out mechanisms and improperly tracking users, particularly students. The company must implement proper opt-out methods, improve disclosures, and comply with children's data consent requirements.
The California Privacy Protection Agency (CalPrivacy) announced the appointment of Sabrina Boyson Ross as its first Chief Privacy Auditor and the formation of a new Audits Division. The division will conduct regulatory examinations of businesses to determine compliance with the California Consumer Privacy Act, and its findings may lead to enforcement referrals.