Just two days after fining LocateSmarter, the California Privacy Protection Agency has issued its second data broker enforcement action of the week.

On August 13, 2026, the CalPrivacy Board ordered Boston-based Cybba, Inc. to pay a $52,400 fine for failing to register with the state’s Data Broker Registry by the 2025 deadline. The company sells personal information—including geolocation data, internet activity data, and inferences—primarily to support targeted advertising. One of its services analyzes purchasing behavior signals to identify likely repeat customers and other high-intent buyers.