Since the California Privacy Protection Agency (CPPA) announced an enforcement sweep in October 2024, it has settled a handful of actions with data brokers for violating the Delete Act. The cases have focused on data brokers’ failures to register with the state and pay the required annual fee. This article, with input from Ben Isaacson, a principal at In‑House Privacy, Inc., and Julie Rubash, GC and CPO at Sourcepoint, assesses commonalities in the CPPA’s Delete Act settlements, identifies takeaways for data brokers, and offers advice on preparing to comply with Data Broker Requests and Opt-Out Platform (DROP) requirements. See “Deciphering the New CPPA Proposed Regulations for Data Brokers” (Dec. 11, 2024).