Author: CalPrivacy and DFPI's Communications Teams
Published: Mar 03, 2026
California is the most populous state in the United States with over 39.5 million residents. It is also home to some of the most innovative companies in the world and some of the strongest consumer protection laws.
CalPrivacy and the Department of Financial Protection and Innovation (DFPI) are two state agencies that oversee consumer protection laws. This National Consumer Protection Week (March 1-7), we’re taking a closer look at how CalPrivacy and DFPI work together to protect consumers.
Enforcing Consumer Privacy Rights
Californians have the strongest privacy rights in the U.S. thanks to the protections provided in the California Consumer Privacy Act (CCPA). Examples of these rights include the right to opt-out of the sale of specific personal information and the right to delete the information certain businesses have collected from you.
CalPrivacy has the authority to take action if businesses are not respecting consumers’ legal rights. If a consumer believes their CCPA rights have been violated, they can submit a complaint to CalPrivacy, which may lead to action imposing fines and preventing future violations. Consumer complaints have resulted in settlements with businesses that have violated consumers’ privacy rights. For example, CalPrivacy’s settlement with Tractor Supply Company resulted in the company paying a $1.2 million fine.
Regulating Data Brokers
Data brokers are companies that collect and sell consumers’ personal information with no direct relationship to the consumer and meet certain criteria. These companies hold vast amounts of personal information and may sell it to various entities including landlords, other businesses, and even fraudsters. Most consumers are completely unaware that their data is being used in this way. CalPrivacy protects consumers by regulating data brokers through the Delete Act.
Every January, all data brokers that collect California consumers’ data must register with CalPrivacy or face steep fines. In fact, CalPrivacy has established a Data Broker Strike Force focused on finding unregistered data brokers and bringing enforcement actions against them.
In addition to the data broker registry, CalPrivacy has developed the Delete Request and Opt-out Platform (DROP). DROP is a new system for California consumers that allows them to submit a delete request to every registered data broker in a single click. This is a major step towards making privacy rights easier. Without DROP, you would have to reach out to more than 500 data brokers individually to delete your data.
DROP is free, available to all California residents, and takes less than 10 minutes to sign up. Beginning August 1, 2026, data brokers are required to begin processing these requests and do so every 45 days. Consumers can register on the CalPrivacy DROP website.
California’s Financial Regulator
The California Department of Financial Protection and Innovation (DFPI) regulates the state’s financial marketplace to keep it fair, transparent, and secure for all Californians. It provides important consumer protections as it enforces laws and regulations, promotes innovation and honest business practices, and increases consumer awareness of risks, fraud, and abuse.
The passage of the California Consumer Financial Protection Law (CCFPL) significantly expanded the DFPI’s authority. The law allows the department to oversee previously unregulated financial activity, set clearer expectations for emerging products and services, encourage responsible innovation, and increase public education to vulnerable populations.
Contact and Assistance
One of the most valuable resources for Californians is the DFPI’s Consumer Services Office (CSO). If you believe you’ve been the victim of a financial scam, unfair practice (like predatory lending), or are experiencing an issue with one of the DFPI’s many licensees, you can submit a complaint to the CSO. The DFPI acts as a mediator, reviewing the issue, contacting the company on your behalf, and working to resolve disputes. The CSO also provides services in many languages, ensuring that legal status or language barriers don’t prevent anyone from getting help.
Protective Enforcement Actions
When financial companies violate the law or mislead California consumers, the DFPI can take enforcement actions to stop unlawful behavior, revoke licenses, shut down operations, and in some circumstances, secure restitution for victims. The DFPI’s Enforcement Division also investigates reports of crypto scam activity and publishing its findings to the Department’s nationally recognized Crypto Scam Tracker to help inform consumers and investors.
National Consumer Protection Week
Whether it’s protecting your personal information or safeguarding your financial well-being, California’s consumer protection agencies are working every day to ensure the marketplace remains fair, transparent, and accountable.
This National Consumer Protection Week, take a moment to learn about your rights, submit a complaint to CalPrivacy or DFPI if you’ve experienced harm, and explore tools like DROP and the Crypto Scam Tracker. When consumers understand and exercise their rights, the system works better for everyone.