\u00a0<\/p>\n
On December 3, 2025 the California Privacy Protection Agency (\u201cCPPA\u201d) issued an enforcement decision against ROR Partners LLC (\u201cROR\u201d) carrying important implications for companies engaged in data-driven advertising. In its order, the CPPA Board required ROR, a Nevada-based marketing firm serving fitness and wellness brands, to pay $56,600 in fines and fees after determining the company operated as a data broker without registering as required under California\u2019s Delete Act.<\/p>\n
Findings<\/p>\n
According to the CPPA\u2019s findings, ROR Partners amassed \u201cbillions of data points\u201d to \u201ccreate detailed consumer profiles and custom audience lists\u201d used for targeted advertising. These datasets encompassed demographic, socioeconomic, and behavioral information tied to millions of consumers.<\/p>\n
ROR Partners also generated inferences about consumers, such as identifying individuals who frequently attend health clubs and placing them in fitness-related audience segments that could be sold for marketing purposes. The CPPA concluded that these activities occurred in 2024 without the required registration in California\u2019s Data Broker Registry.<\/p>\n
One of the decision\u2019s central messages is that businesses cannot avoid California\u2019s data broker requirements by bundling sales of personal information with other advertising marketing services.<\/p>\n
As the Board emphasized, \u201ca sale is a sale\u201d and \u201ca business cannot bypass the CCPA\u2019s and the Delete Act\u2019s requirements by selling personal information as part of a larger suite of products and services it offers.\u201d<\/p>\n
Michael Macko, the CPPA head of enforcement, framed the case as part of a broader shift toward scrutinizing companies that generate and monetize consumer profiles, stating that the CPPA \u201cwill scrutinize any business that walks and talks like a data broker to make sure it\u2019s registered, and\u2026will continue to examine businesses that create inferences about consumers to profile them.\u201d<\/p>\n
This marks a clear public statement that the CPPA views inference-based advertising (a cornerstone of many modern ad-tech models) as an area ripe for enforcement.<\/p>\n
Key Takeaways\u00a0<\/p>\n
Marketers and advertisers are firmly within scope:\u00a0Selling or licensing audience segments, profiles, or behavioral predictions can trigger data broker obligations.<\/p>\n
Inference data is personal information. The CPPA has stated that consumer profiles are protected personal information.<\/p>\n
Annual registration is mandatory: Companies that may have engaged in data broker activity must evaluate their practices and register if applicable.<\/p>\n
The Delete Request and Opt-Out Platform will transform consumer deletion rights: Businesses should prepare for operational and technical demands associated with mass deletion requests beginning in 2026.<\/p>\n","protected":false},"excerpt":{"rendered":"\u00a0 On December 3, 2025 the California Privacy Protection Agency (\u201cCPPA\u201d) issued an enforcement decision against ROR Partners…\n","protected":false},"author":2,"featured_media":83037,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[7,9,8,47209,47210,9295,47211],"class_list":["post-83036","post","type-post","status-publish","format-standard","has-post-thumbnail","category-california","tag-california","tag-california-headlines","tag-california-news","tag-california-privacy-protection-agency","tag-data-broker","tag-privacy","tag-technology-law-updates"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/posts\/83036","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/comments?post=83036"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/posts\/83036\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/media\/83037"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/media?parent=83036"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/categories?post=83036"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-ca\/wp-json\/wp\/v2\/tags?post=83036"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}