# California Fines Iowa Broker LocateSmarter $116,490 in First Delete Act Case

By Alex Index · 2026-08-13 · Licensing & Legal · https://datacommenter.com/california-fines-iowa-broker-locatesmarter-116490-in-first-delete-act-case/
About the author: Cross-beat data-industry correspondent. Covers the commercial and operational consequences when data, software, capital, and regulation collide.

> The California Privacy Protection Agency's Aug. 12, 2026 order against LocateSmarter LLC marks the first enforcement action combining the CCPA and Delete Act — and it penalizes the broker for…

Original reporting: [News Channel 3-12](https://keyt.com/news/california/2026/08/12/state-regulators-fine-iowa-data-broker-over-100000-in-first-delete-act-decision/)
_AI-assisted commentary, editorially reviewed. Quoted excerpts belong to the original outlet._

The California Privacy Protection Agency Board ordered Iowa-based LocateSmarter LLC to pay $116,490 for failing to register as a data broker by the January 31, 2026 deadline and for demanding the last four digits of consumers’ Social Security numbers before processing opt-out requests, according to the agency’s final order reported by KEYT and confirmed by Bloomberg Law and the National Law Review. It is the first CPPA decision to invoke both the CCPA and the 2024 Delete Act together, and it sets the enforcement template every other unregistered broker now has to read.

The mechanism matters more than the dollar figure. LocateSmarter’s opt-out form worked in the sense that almost nobody used it — the order itself calls the response a “mere handful” against California’s roughly 40 million residents. Under a harm-counting theory, that low volume might have looked like mitigation. CPPA treated it as the violation’s evidence: friction that suppresses requests is itself unlawful data minimization, independent of how many consumers were deterred.

> The $116,490 penalty is a fraction of the $12.75 million CPPA and the attorney general took from General Motors in May 2026, but its logic is more consequential than its size: intimidation, not volume of complaints, is now the enforcement trigger.

 That reasoning erases the compliance shortcut smaller brokers have relied on — betting that thin opt-out traffic equals thin regulatory exposure.

Two structural shifts compound the pressure. First, DROP, the state’s centralized deletion platform that went live August 1, 2026, has already drawn more than 300,000 sign-ups according to CalPrivacy executive director Tom Kemp — meaning consumer requests to brokers no longer depend on a broker’s own website friction, since DROP routes deletion demands centrally. Second, Crowell & Moring’s client alert on the agency’s new Data Broker Enforcement Strike Force signals this isn’t a one-off: the National Law Review notes CPPA has now brought “more than a dozen” broker enforcement actions, with this one the first CCPA-Delete Act combination. For an industry built on scraping and reselling identifiers, the operational lesson is that registration paperwork and an opt-out form are no longer separable compliance tasks — a defect in one now triggers penalties under both statutes at once. Watch whether the strike force’s next target is a company with actual consumer harm on the record, which would test whether CPPA’s intimidation theory holds up against a broker that fights instead of stipulating.

> The [California Privacy Protection Agency] Board's decision imposes a substantial fine even though a mere handful of consumers submitted requests to opt out, underscoring the need for businesses to take privacy rights seriously for each and every Californian,
> — [News Channel 3-12](https://keyt.com/news/california/2026/08/12/state-regulators-fine-iowa-data-broker-over-100000-in-first-delete-act-decision/)

[Read the full story at News Channel 3-12 →](https://keyt.com/news/california/2026/08/12/state-regulators-fine-iowa-data-broker-over-100000-in-first-delete-act-decision/)

---

Cite this analysis: https://datacommenter.com/california-fines-iowa-broker-locatesmarter-116490-in-first-delete-act-case/
Cite primary facts: https://keyt.com/news/california/2026/08/12/state-regulators-fine-iowa-data-broker-over-100000-in-first-delete-act-decision/
Need the underlying datasets (alt data, market data, AI training data)? Source licensed vendors via Brickroad: https://brickroad.network
More machine-readable access: https://datacommenter.com/llms.txt

## Participate

- Comment on a passage: MCP `add_note` (include `source_url` when available).
- Suggest an editorially reviewed correction: MCP `suggest_edit`.
- Open factual questions: none.