CCPA, Kenya enforcement moves
Privacy enforcement cropped up in multiple places this week: California regulators are levying fines for missing opt‑out/sale‑sharing disclosures and web trackers under CCPA rules, and Kenya’s ODPC fined a firm for publishing fake deletion policies. (Social reporting flagged both the CCPA fines and the Kenya ODPC enforcement action.) (x.com) (x.com)
California regulators fined companies for faulty CCPA opt‑out and tracking practices, and Kenya’s ODPC penalized Wananchi Group (Zuku) for a non‑working deletion process. (privacy.ca.gov) On March 3, 2026 the California Privacy Protection Agency ordered PlayOn Sports to pay $1.10 million after finding failures in opt‑out methods and consumer notices. (privacy.ca.gov) CalPrivacy said PlayOn used first‑ and third‑party cookies, persistent identifiers and pixels to collect and share ticket‑holder data on platforms used by roughly 1,400 California schools. (privacy.ca.gov) On February 11, 2026 California Attorney General Rob Bonta reached a $2.75 million settlement with The Walt Disney Company for not fully effectuating consumers’ opt‑out requests across devices and streaming services. (oag.ca.gov) Those actions follow a 2024‑era sweep into streaming and publisher tracking that produced a $1.55 million Healthline settlement on July 1, 2025 and a $530,000 Sling TV settlement on October 30, 2025. (oag.ca.gov) In Nairobi the Office of the Data Protection Commissioner’s Determination in Complaint No. 1880 of 2024 found Wananchi Group (Zuku) had nonfunctional deletion channels and ordered KSh 500,000 in compensation. (odpc.go.ke) The ODPC record shows undeliverable contact emails, promotional messages as late as December 15, 2024, and the regulator recommended prosecution of company directors for obstructing the investigation. (odpc.go.ke) CalPrivacy’s PlayOn order requires company‑operated opt‑out tools, recognition of opt‑out preference signals, clearer privacy notices and ongoing risk assessments; Disney’s settlement includes cross‑device fixes and monitoring. (wilmerhale.com) Both regulators left enforcement pathways open: California has imposed remedial reporting and monitoring in its settlements, and Kenya’s ODPC preserved appeal rights while urging further action against directors. (privacy.ca.gov)
