California Shuts Down Health Data Resales By Unregistered Brokers

California’s CPPA announced enforcement actions under the Delete Act, fining Datamasters $45,000 for selling sensitive consumer profiles (including health-related and demographic attributes) without registering as a data broker, ordering it to cease sales and delete California data, and fining S&P Global $62,600 for missing the 2025 registration deadline. The actions coincide with the launch of the DROP platform, which lets consumers request deletion across all registered data brokers in a single step.