California Privacy Protection Agency

Rule Changes

Reports uneven early broker compliance while raising fees and advancing audit rules

California's data-broker deletion mandate hit its first bump. At the state privacy agency's August 7 board meeting, only 30% of the 600-plus registered brokers had processed a single request in DROP's first week of enforcement.

Updated Aug 11

Rule Changes

Primary enforcer of California privacy law alongside state Attorney General

California passed the first comprehensive state privacy law in 2018. Eight years later, twenty states have followed, creating a regulatory patchwork that now covers roughly half the American population. Indiana, Kentucky, and Rhode Island's laws took effect January 1, 2026, joining a wave of amendments and enforcement actions that force every consumer-facing app to reckon with data collection practices.

Updated May 27

Rule Changes

Defending California's regulatory authority

The DOJ's AI Litigation Task Force began operations January 10, 2026 with one mission: kill state AI laws in federal court. Attorney General Pam Bondi's team, consulting with AI czar David Sacks, will challenge comprehensive AI regulations from California, Texas, and Colorado that President Trump's December executive order called unconstitutional burdens on interstate commerce.

Updated May 20