CyberHappenings logo
☰
🏠 Home 📂 Browse ℹī¸ About

Noncompliance with CCPA by Data Brokers

First reported
Last updated
📰 1 unique sources, 1 articles

Summary

Hide ▲

A study from the University of California, Irvine, reveals that roughly half of the 543 registered data brokers in California fail to comply with the California Consumer Privacy Act (CCPA). These brokers often do not respond to consumer requests to access or delete personally identifiable information (PII) within the required 45-day timeframe. This noncompliance poses significant privacy risks, as personal data, even if anonymized, can be compromised when aggregated. The study highlights that the lack of compliance is more pronounced when consumers use phone or email for verifiable consumer requests (VCRs), with only 42% of these requests being answered. Form-based VCRs have a higher response rate at 71%. The issue is compounded by the fact that consumers must provide PII to verify their identity, which can further compromise privacy.

Timeline

  1. 27.08.2025 16:24 📰 1 articles

    Noncompliance with CCPA by Data Brokers

    A study from the University of California, Irvine, reveals that roughly half of the 543 registered data brokers in California do not comply with the CCPA's regulations. These brokers often fail to respond to consumer requests to access or delete PII within the required 45-day timeframe. The study also highlights the privacy risks associated with the need to provide PII for verification purposes and the extensive, unregulated resale market for data.

    Show sources
    Open in new tab

Information Snippets

  • The California Consumer Privacy Act (CCPA) requires data brokers to respond to consumer requests to access or delete PII within 45 days.

    First reported: 27.08.2025 16:24
    📰 1 source, 1 article
    Show sources

  • Approximately 50% of the 543 registered data brokers in California do not comply with the CCPA's regulations.

    First reported: 27.08.2025 16:24
    📰 1 source, 1 article
    Show sources

  • Response rates to consumer requests vary significantly based on the method of request, with form-based requests having a higher response rate (71%) compared to phone or email requests (42%).

    First reported: 27.08.2025 16:24
    📰 1 source, 1 article
    Show sources

  • Consumers must provide PII to verify their identity when requesting information from data brokers, which can further compromise privacy.

    First reported: 27.08.2025 16:24
    📰 1 source, 1 article
    Show sources

  • The CCPA includes a validation process that prevents data brokers from storing and using PII provided for verification purposes beyond the query.

    First reported: 27.08.2025 16:24
    📰 1 source, 1 article
    Show sources

  • The resale market for data is vast and largely unregulated, with data brokers often selling information to both legitimate businesses and criminal actors.

    First reported: 27.08.2025 16:24
    📰 1 source, 1 article
    Show sources