On March 12, 2025, the California Privacy Protection Agency (Agency) announced its first non-data broker enforcement action requiring a ...