The California data broker law (Assembly Bill No. 1202) was passed in conjunction with the California Consumer Privacy Act (CCPA) to establish a publicly accessible registry of data brokers who collect and sell the personal information of California consumers and to help facilitate consumers privacy rights under the CCPA.


The law requires that a Business (as defined by the CCPA) that knowingly collects and sells to third parties the personal information of California consumers with whom the Business has no direct relationship shall register annually as a data broker with the California Attorney General.


The California Attorney General enforces compliance with the data broker law and registry.


A data broker shall face a civil penalty of one hundred dollars ($100) for each day it fails to register plus an amount equal to the fees that were due during the period it failed to register. Additionally, expenses incurred by the Attorney General in the investigation and prosecution of the action may be awarded as the court deems appropriate.