CPPA fines Tractor Supply Company $1.4 million for privacy violations
The California Privacy Protection Agency (CPPA) on Tuesday announced that a large national retailer has agreed to pay $1.35 million to resolve allegations that it violated California consumer privacy law for a host of violations, including by not giving people the right to opt out of having their personal data sold and shared.
Tractor Supply Company also allegedly failed to publish a privacy policy, notify job applicants of their privacy rights and shared personal data with third parties without permission.
In addition to paying the fine, Tractor Supply Company has agreed to change its business practices, appoint a company official to certify compliance for the next four years and ensure it is not using tracking technologies.
The fine is the largest ever to be secured by the CPPA.
Tractor Supply Company has more than 2,500 stores in 49 states. A spokesperson for Tractor Supply said in a statement that the company “takes our responsibilities to our Team Members, customers and applicants seriously. We are committed to complying with all privacy laws and protecting the trust placed in us.”
Suzanne Smalley
is a reporter covering privacy, disinformation and cybersecurity policy for The Record. She was previously a cybersecurity reporter at CyberScoop and Reuters. Earlier in her career Suzanne covered the Boston Police Department for the Boston Globe and two presidential campaign cycles for Newsweek. She lives in Washington with her husband and three children.