California's Privacy Protection Agency "issued a record fine earlier this month to Tractor Supply," [1]according to an EFF Deeplinks blog post — for "apparently ducking its responsibilities under the California Consumer Privacy Act."

> Under that law, companies are required to respect California customers' and job applicants' rights to know, delete, and correct information that businesses collect about them, and to opt-out of some types of sharing and use. The law also requires companies to give notice of these rights, along with other information, to customers, job applicants, and others. The CPPA said that Tractor Supply failed several of these requirements. This is the first time the agency has enforced this data privacy law to protect job applicants...

>

> Tractor Supply, which has 2,500 stores in 49 states, will pay for their actions to the tune of $1,350,000 — the largest fine the agency has issued to date. Specifically, the agency said, Tractor Supply [2]violated the law by:

>

> - Failing to maintain a privacy policy that notified consumers of their rights;

>

> - Failing to notify California job applicants of their privacy rights and how to exercise them;

>

> - Failing to provide consumers with an effective mechanism to opt-out of the selling and sharing of their personal information, including through opt-out preference signals such as Global Privacy Control; and

>

> - Disclosing personal information to other companies without entering into contracts that contain privacy protections.

>

>

> In addition to the fine, the company also must take an inventory of its digital properties and tracking technologies and will have to certify its compliance with the California privacy law for the next four years.

The agency's web site says it "continues to actively enforce California's cutting-edge privacy laws." It's recently issued decisions (and fines) against American Honda Motor Company and [3]clothing retailer Todd Snyder . Other recent actions include:

Securing a settlement agreement requiring data broker Background Alert — which promoted its ability to dig up "scary" amounts of information about people — to [4]shut down or pay a steep fine .

Launching the bipartisan [5]Consortium of Privacy Regulators to collaborate with states across the country to implement and enforce privacy laws nationwide.

Partnering with the data protection authorities [6]in Korea , [7]France , and the [8]United Kingdom to share information and advance privacy protections for Californians.

The agency has secured [9]more than half a dozen successful enforcement actions against [10]unregistered data brokers following an investigative sweep launched late last year to assess compliance with the Delete Act.



[1] https://www.eff.org/deeplinks/2025/10/california-targets-tractor-supplys-tricky-tracking

[2] https://cppa.ca.gov/pdf/20250930_tractor_supply_bd_sfo.pdf

[3] https://cppa.ca.gov/announcements/2025/20250506.html

[4] https://cppa.ca.gov/announcements/2025/20250227.html

[5] https://cppa.ca.gov/announcements/2025/20250416.html

[6] https://cppa.ca.gov/announcements/2025/20250113.html

[7] https://cppa.ca.gov/announcements/2024/20240625.html

[8] https://cppa.ca.gov/announcements/2025/20250429.html

[9] https://cppa.ca.gov/announcements/2025/20250729.html

[10] https://cppa.ca.gov/announcements/2025/20250129.html