CPPA Settles With Unregistered Data Brokers

Want to receive these privacy recaps that matter to consent management, adtech and martech in your inbox? Sign up for our privacy newsletter, A Little Privacy, Please.

USA

CPPA Settles With Unregistered Data Brokers

Following an investigative sweep of unregistered data brokers, the California Privacy Protection Agency (CPPA) announced its settlement with two data brokers, Growbots and Uplead, for $34,400 and $35,400, respectively, plus attorneys fees and costs, for failing to register under the Delete Act. Growbots and Uplead are both providers of sales prospecting software tools. 

TAKEAWAY

Although only two settlements were announced, the CPPA’s data broker registry has seen an approximately 5% increase in new registrations over the last two months after a lack of any new registrations in the several months before that, according to snapshots from The Wayback Machine, indicating potential results from CPPA pressure. The only current consequence of registering as a data broker is an obligation to comply with certain disclosure requirements and to pay annual fees, but starting in 2026, data brokers will be required to comply with user deletion requests submitted through a universal deletion mechanism offered by the CPPA, which, depending on the mechanism’s popularity, could be a significant strain on data broker resources and have a significant impact on data broker business models. 

Norway Parliament Adopts Changes to Cookie Consent Obligations

After three years in public consultation, the Norway Parliament adopted a new Electronic Communications Act which, among many other changes, includes changes to rules regarding consent to cookies, requiring that consent for cookies align with consent requirements under GDPR, including that consent be as easy as rejection. 

TAKEAWAY

The obligation that the use of non-essential cookies be as easy to reject as to accept is one that has been adopted across several other jurisdictions in the EEA and has resulted in enforcement sweeps in Germany, UK, Greece and France, among others. The new Norway Act is expected to enter into force without delay. 

To learn more about Sourcepoint support for the Norwegian market, watch this client webinar on-demand.

Want more of the privacy highlights that matter for consent management, adtech and martech? Sign up for our privacy newsletter, A Little Privacy, Please.

A Little Privacy, Please weekly recaps are provided for general, informational purposes only, do not constitute legal advice, and should not be relied upon for legal decision-making. Please consult an attorney to determine how legal updates may impact you or your business.