Penalty Amount
$56,600
The California Privacy Protection Agency fined ROR Partners LLC $56,600 for failing to register as a data broker under the Delete Act. The marketing firm sold custom audience lists built from consumer data without registration, highlighting that businesses collecting and selling personal information must comply with data broker requirements.
ROR Partners LLC must pay $56,600 in fines and past-due fees and register with the California Data Broker Registry.
In-house legal teams should review all vendor, customer, and data processing agreements where personal information is sold, shared, or licensed for advertising or profiling purposes. Specifically scrutinize clauses governing data sharing, the definition of a 'sale' of data, consent mechanisms, data retention, and audit rights. Agreements with marketing, analytics, or data enrichment firms must be amended to explicitly require the counter-party's compliance with data broker registration under the Delete Act, including annual registration and fee payment. Consider adding representations that the party is not a required data broker or, if it is, that it is duly registered, and include indemnification provisions for violations.
Entity
ROR Partners LLC
Also known as: ROR Partners
Industry
AdvertisingOfficial Press Release
https://privacy.ca.gov/2025/12/calprivacy-fines-marketing-firm-for-selling-custom-audiences-without-data-broker-registration/
ror partners ood
https://privacy.ca.gov/wp-content/uploads/sites/357/2026/01/ror_partners_ood.pdf
California Privacy Protection Agency Enforcement Page
https://cppa.ca.gov/enforcement/
$57K
The California Privacy Protection Agency fined ROR Partners LLC $56,600 for failing to register as a data broker under the Delete Act. The Nevada-based marketing firm must pay the fine and past-due fees. This action is part of CalPrivacy's enforcement against unregistered data brokers.
$376K
The California Privacy Protection Agency settled with Ford Motor Company for $375,703 after finding that Ford violated the CCPA by requiring email verification for opt-out requests, creating unnecessary friction. Ford must implement easier opt-out methods, conduct a website audit, and comply with global privacy controls.
$1.1M
The California Privacy Protection Agency settled with PlayOn Sports for $1.10 million over CCPA violations, including failing to provide adequate opt-out mechanisms and improperly tracking users, particularly students. The company must implement proper opt-out methods, improve disclosures, and comply with children's data consent requirements.
$45K
Datamasters, a data broker, failed to register with the California Data Broker Registry as required by the Delete Act. The company sold sensitive personal information including health conditions, age, race, and political views. As a result, it must pay a $45,000 fine and cease all sales of Californians' personal information.
The California Privacy Protection Agency (CalPrivacy) announced the creation of a Data Broker Enforcement Strike Force to investigate privacy violations by data brokers. The strike force will focus on compliance with the Delete Act's registration requirement and the CCPA, building on previous enforcement actions. This initiative aims to hold data brokers accountable and protect Californians' personal information.
$1.4M
The California Privacy Protection Agency (CPPA) settled with Tractor Supply Company for $1.35 million over violations of the California Consumer Privacy Act (CCPA). The violations included failing to maintain a proper privacy policy, not notifying job applicants of their rights, lacking an effective opt-out mechanism, and sharing personal information without adequate contracts. Tractor Supply must pay the fine and implement remedial measures such as scanning digital properties and annual compliance certification.