Skip to content
DropDue

Glossary/GLOSSARY

Statutory penalty

The statutory penalty for a data broker that fails to register in California is up to $200 per day for each day the registration is late, assessed by the California Privacy Protection Agency.

In plain terms

It accrues daily rather than landing as a single fine, which is what makes it grow. The published enforcement orders read as plain arithmetic: days late multiplied by the daily amount. That is how an order against a small business reaches five or six figures from a filing that costs a fraction of it. Deletion duties carry exposure of their own, separately from registration. The statutory maximums appear at Cal. Civ. Code section 1798.99.82.

What it means for a registered broker

The figure is a ceiling, not a prediction, and what any specific matter would cost is a question for your own counsel. What is worth acting on is the shape of it. Because it runs daily, the difference between noticing in week one and noticing in month six is the entire amount. A missed registration and a stalled deletion cycle both keep running while nobody is looking, so give each one a dated owner rather than a good intention. This is not legal advice.

Where it comes from
Delete Act, SB 362 (2023)

Not legal advice.