Nation's Largest Rural Lifestyle Retailer to Pay $1.35M Over CCPA Violations

What happened

The California Privacy Protection Agency fined Tractor Supply Company $1,350,000 for violating the CCPA by failing to provide proper privacy notices and rights to job applicants. The agency required the retailer to inventory its tracking technologies and to have a senior officer certify compliance each year for the next four years. The decision follows a consumer complaint and a related court subpoena. This is the largest fine in CPPA history and highlights obligations for applicant privacy.

Why it matters

Other retailers handling consumer and applicant data must audit their privacy notices and opt‑out mechanisms now, and consider appointing a compliance officer to certify ongoing CCPA adherence.

Business impact

Failure to update notices or certify compliance could trigger similar fines and litigation, increasing legal and operational costs.

Checklist

• Review and update privacy noticesHigh priority

  Ensure notices for both consumers and job applicants clearly describe data collection, use, and opt‑out options.

• Audit digital properties for tracking technologiesHigh priority

  Scan websites, apps, and in‑store systems to identify and document all tracking tools.

• Appoint a senior officer to certify CCPA complianceHigh priority

  Designate a corporate officer or director to provide annual compliance certification for the next four years.

Who reported it

Discussion