Un-broker my heart, a late amendment to the CCPA has added data broker registration to the mix.
All data brokers as defined in amendment AB-1202 are required to:
- register with the Attorney General on or before January 31 following each year in which a business meets the definition of data broker. This means disclosing their name and any additional information or explanation the data broker chooses to provide concerning its data collection practices.
- pay a registration fee
Who’s covered: any business that knowingly collects and sells to third parties the personal information of a consumer with whom the business does not have a direct relationship
Who’s not covered:
- consumer reporting agency to the extent covered by FCRA
- financial institution to the extent covered by GLBA
- entity to the extent covered by the Insurance Information and Privacy Protection Act
Consequences for failing to register:
- injunction and civil penalties, fees and costs to the tune of $100 for each day the data broker fails to register and;
- fees that were due and;
- expenses incurred by the Attorney General in the investigation and prosecution of the action.
Read the full text of the amendment.
[View source.]
