California Shuts Down Health Data Resales By Unregistered Brokers
California Shuts Down Health Data Resales By Unregistered Brokers
https://www.infosecurity-magazine.com/news/california-shuts-health-data/
Publish Date: 2026-04-06 21:00:05
Source Domain: www.infosecurity-magazine.com
California Privacy Regulators Take New Measures Against Unauthorized Data Trading
California’s privacy regulators have initiated significant actions against companies that were found trading in sensitive personal data without proper authorization. The California Privacy Protection Agency (CPPA) has targeted a marketing firm, Rickenbacher Data LLC, which was found buying and selling health-related and other highly sensitive profiles without registration as a data broker in California. Officials emphasized the serious risks of such data being used for commercial gain. The CPPA fined Rickenbacher Data LLC $45,000, and mandated that the company cease selling personal information from Californians, delete existing data, and expunge any future data immediately. Another firm, S&P Global, was fined $62,600 for failing to register as a data broker due to an administrative error, resulting in an unregister status for 313 days. These actions underscore California’s stringent enforcement of its privacy laws, specifically the Delete Act, with continued focus on registered data brokers.
Key Points:
- California regulators fined Rickenbacher Data LLC a total of $45,000 for unlawful trading of highly sensitive personal data.
- The company handled records on millions with details including health conditions, perceived race, political views, and financial behavior.
- CPPA also fined S&P Global $62,600 for not registering as a data broker due to an administrative oversight.
- The actions align with California’s efforts to enforce the Delete Act and protect personal data through the new DROP platform.
