California Attorney General approves AB 883 tightening data broker law

What happened

• The bill expands the definition of data broker and requires more detailed disclosures about data collection practices.
• It introduces higher registration fees and mandates annual compliance audits.
• The changes are enforced by the California Privacy Protection Agency.

Why it matters

Data brokers operating in California will need to revise their registration filings and implement regular audit processes to avoid penalties. Companies that sell personal data should review the new disclosure templates now.

Business impact

Compliance costs will rise due to the audit requirement and higher fees, and firms that fail to update registrations could face enforcement actions.

What to check

1. 1

   update registrationHigh priority

   Submit revised data broker registration with expanded disclosures to the California Privacy Protection Agency.

2. 2

   schedule annual auditHigh priority

   Establish a yearly audit of data collection and sharing practices to demonstrate compliance with AB 883.