The California Privacy Protection Agency has reached a $1.35 million settlement with Tractor Supply Co. over alleged violations of the California Consumer Privacy Act of 2018, primarily for failing to provide required privacy notices to consumers and job applicants. This marks the largest fine issued by the agency since its establishment in 2020.
Under the CCPA, businesses must inform all “consumers”—a term that includes employees and job applicants—of their privacy rights. These rights include knowing what personal information the business collects, how it is used or shared, and the ability to request correction or deletion.
While most violations in this case involved the company’s failure to provide adequate notices to traditional consumers and honor their opt-out requests, the settlement also addressed the company’s failure to provide required disclosures to job applicants. Specifically, the company did not inform applicants of their CCPA rights or how to exercise them.