The California Privacy Protection Agency (CPPA) Board is closely watching data brokers. In the past month, it voted to adopt proposed regulations (Proposed Regs) that expand upon and clarify key provisions of the Delete Act, broadening the definition of data broker, and reached settlements with two data broker companies about a week after it had announced that it was beginning a public investigative compliance sweep. This article, with insights from experts at Frankfurt Kurnit, Troutman Pepper and WilmerHale, examines how the Proposed Regs expand upon some of the Delete Act’s central requirements and offers practical measures for data brokers on how to meet their compliance obligations. See “Outgoing CPPA Board Member Discusses Rulemaking and Looming Privacy Issues” (Sep. 25, 2024).