Since the California Privacy Protection Agency (CPPA) announced an enforcement sweep in October 2024, it has settled a handful of actions with data brokers for violating the Delete Act. The cases have focused on data brokers’ failures to register with the state and pay the required annual fee. This article, with input from Ben Isaacson, a principal at In‑House Privacy, Inc., and Julie Rubash, GC and CPO at Sourcepoint, assessed commonalities in the CPPA’s Delete Act settlements, identified takeaways for data brokers, and offered advice on preparing to comply with Data Broker Requests and Opt-Out Platform requirements.