Penalty Amount
$55,800
The California Privacy Protection Agency settled with data broker Key Marketing Advantage, LLC for failing to register and pay fees under the Delete Act. KMA will pay $55,800 and agree to injunctive terms. This is the fifth enforcement action in a sweep against unregistered data brokers.
KMA must pay a $55,800 fine and comply with injunctive terms, including paying attorney fees for any future non-compliance.
In-house legal teams should review vendor and data processing agreements with third-party data brokers, focusing on clauses related to regulatory compliance, fee obligations, and enforcement liabilities. Specifically, examine representations and warranties ensuring the data broker maintains active registration under the Delete Act, clauses allocating responsibility for annual fees and penalties, indemnification provisions covering regulatory fines and attorney fees, and audit rights to verify compliance status. Contracts may require amendments to mandate annual certification of CPPA registration, explicitly assign fee payment to the data broker, include termination rights for non-compliance, and address potential injunctive relief obligations. Given the upcoming DROP platform requirements, future agreements should also consider obligations related to consumer deletion requests.
Entity
Key Marketing Advantage, LLC
Also known as: Key Marketing Advantage
Industry
Data Broker$56K
The California Privacy Protection Agency (CPPA) settled with data broker Key Marketing Advantage, LLC for failing to register and pay fees under the Delete Act. KMA will pay $55,800 and comply with injunctive terms, including covering attorney fees for non-compliance. This is the fifth enforcement action in CPPA's sweep against unregistered data brokers.
The California Privacy Protection Agency announced that over 300,000 Californians have signed up for the Delete Request and Opt-out Platform (DROP) since its launch five months ago. The Data Broker Registry now includes 581 registered data brokers, the highest number since the registry was established in 2020. Beginning August 1, 2026, all data brokers will be required to access DROP and process deletion requests.
The California Privacy Protection Agency launched a statewide roadshow to promote its Delete Request and Opt-out Platform (DROP), which allows California residents to request deletion of their personal information from all registered data brokers in a single request. The roadshow aims to increase awareness of data privacy rights and the DROP tool, which data brokers are legally required to process starting August 1, 2026.
$376K
The California Privacy Protection Agency settled with Ford Motor Company for $375,703 after finding that Ford violated the CCPA by requiring email verification for opt-out requests, creating unnecessary friction. Ford must implement easier opt-out methods, conduct a website audit, and comply with global privacy controls.
$1.1M
The California Privacy Protection Agency settled with PlayOn Sports for $1.10 million over CCPA violations, including failing to provide adequate opt-out mechanisms and improperly tracking users, particularly students. The company must implement proper opt-out methods, improve disclosures, and comply with children's data consent requirements.
The California Privacy Protection Agency (CalPrivacy) announced the appointment of Sabrina Boyson Ross as its first Chief Privacy Auditor and the formation of a new Audits Division. The division will conduct regulatory examinations of businesses to determine compliance with the California Consumer Privacy Act, and its findings may lead to enforcement referrals.