Last Update: 04/05/2026 at 2:50 PM EST
States Tighten Data Broker Rules
Coverage from Hklaw, Kelley Drye & Warren LLP, and others
Articles
7
Latest Article
03/26
Active Days
834
Executive Summary
California, Texas, and Oregon are broadening data broker rules, raising fees and disclosures to expand oversight and consumer deletion rights
- California approved rules expanding the data broker definition under the DELETE Act and SB 362
- The CPPA raised the annual registration fee from 400 to 6600 to fund DROP
- The new California rules define direct relationship more narrowly and may capture more businesses
- Texas and Oregon already require data broker registration, disclosures, and enforcement measures
- Texas SB 2121 broadens the data broker definition and adjusts applicability thresholds for 2025
- Oregon requires broker registration, opt out disclosures, breach notice, and annual renewal fees
- Several state laws now pair data broker registries with security, transparency, and penalty provisions
Quick Facts
- What: Expanded data broker definitions registration fees disclosures and enforcement rules
- Where: Across California Texas and Oregon
- Why: To improve transparency consumer opt out rights and deletion controls
- Who: State privacy regulators and lawmakers in California Texas and Oregon
- When: Laws and rules adopted in 2023 through 2025

