Cybersecurity Policy Report, Report Highlights CalPrivacy’s 2025 Milestones, Enforcement Activities, (Mar 2, 2026)
Organizations Mentioned:American Honda Motor Co., Inc. | External Affairs
By Tony Foley
The California Privacy Protection Agency (CalPrivacy) has released its 2025 annual report, in which it discusses milestones achieved by the agency last year, including the rollout of the state’s Delete Request and Opt-out Platform (DROP), outlines its expanding enforcement activities, and looks ahead to what to expect in 2026.
CalPrivacy announced the release in a LinkedIn post on Friday. Milestones detailed in the report include the following:
The work of CalPrivacy in developing DROP, which allows California residents to submit a single request to have their data deleted by all registered data brokers;
The promulgation of regulations including a comprehensive set of rules governing automated decision-making technology, risk assessments, cybersecurity audits, and insurance companies; and
The agency’s work in passing the California Opt Me Out Act (A.B. 566, Reg Sess. (Cal. 2025)), which requires web browsers to provide a clear, user-friendly opt-out setting for consumers to prevent the sale or sharing of their personal information (CPR, Oct. 9, 2025).
The report also discusses the work of CalPrivacy’s legal and support divisions last year, as well as the Enforcement Division’s activities, which included an initiative to enforce DELETE Act requirements requiring data broker registration, as well as specific enforcement actions brought against companies like Tractor Supply Co., American Honda Motor Co., and Todd Snyder. Finally, the report provides information on steps taken to increase public awareness by CalPrivacy’s Public and External Affairs Division.
In 2026, the report said, CalPrivacy will develop practical, plain language guidance for businesses, continue vigorous enforcement of the California Privacy Protection Act and DELETE Act, and build on its “work advancing and operationalizing privacy for all Californians.”
News: DataPrivacy DataSecurity StateLegislation CCPA