Internet privacy updates: CalPrivacy fines data brokers, Colorado proposes new AI regulations

According to Data Protection Report, on August 10, CalPrivacy announced an order against an Iowa data broker, LocateSmarter, LLC, alleging that the company violated both California's data broker law and the California Consumer Privacy Act (CCPA).[1]CalPrivacy said the board's decision requires LocateSmarter to pay $116,490 after it failed to register on time and unlawfully required partial Social Security numbers before Californians could opt out.[2] Executive director Tom Kemp said the fine was "substantial... even though a mere handful of consumers submitted requests to opt out"[2].Data Protection Report says CalPrivacy announced another order on August 13, this time against a Massachusetts data broker, Cybba Inc., for failing to register as California's data broker law requires.[1] The outlet reports that Cybba must pay a $52,400 fine plus the data broker registration fee[1].The outlet also reports that on September 1, CalPrivacy announced a similar order with Virginia-based data broker SalesIntel Research Inc.[1], which agreed to pay a fine of $36,400[1].On Colorado, Wiley reports that on August 11, 2026, Colorado released proposed rules to implement the revised Colorado AI Act, known as the ADMT Act, and the Chatbot Safety Act.[3] According to Wiley, the rules, once finalized, will go into effect January 1, 2027.[3]The Colorado Attorney General's office says it will accept written comments between August 11, 2026, and October 26, 2026.[4] Wiley reports that the rulemaking hearing is scheduled for October 26, 2026.[3]