Administrative Enforcement

What it requires

A business, service provider, contractor, or other person that violates the CCPA is liable for an administrative fine assessed by the California Privacy Protection Agency in an administrative hearing. The amounts written into the statute are $2,500 per violation and $7,500 for each intentional violation or violation involving the personal information of a consumer the business knows to be under 16. Those figures are adjusted for inflation under § 1798.199.95(d): effective January 1, 2025 the Agency raised them to $2,663 and $7,988, the amounts in force through 2026. The next adjustment falls on January 1, 2027.

Statute text

Any business, service provider, contractor, or other person that violates this title shall be liable for an administrative fine of not more than two thousand five hundred dollars ($2,500) for each violation or seven thousand five hundred dollars ($7,500) for each intentional violation or violations involving the personal information of consumers whom the business, service provider, contractor, or other person has actual knowledge are under 16 years of age, as adjusted pursuant to subdivision (d) of Section 1798.199.95, in an administrative enforcement action brought by the California Privacy Protection Agency.

California Consumer Privacy Act / California Privacy Rights Act, § 1798.155Read the full section from California Privacy Protection Agency (CalPrivacy)