California privacy agency fines Tractor Supply $1.35 million over applicant failures

What happened

• The California Privacy Protection Agency fined Tractor Supply Company $1,350,000 for violating the CCPA by failing to provide proper privacy notices and rights to job applicants.
• The agency required the retailer to inventory its tracking technologies and to have a senior officer certify compliance each year for the next four years.
• The decision follows a consumer complaint and a related court subpoena.
• This is the largest fine in CPPA history and highlights obligations for applicant privacy.

Why it matters

Other retailers handling consumer and applicant data must audit their privacy notices and opt‑out mechanisms now, and consider appointing a compliance officer to certify ongoing CCPA adherence.

Business impact

Failure to update notices or certify compliance could trigger similar fines and litigation, increasing legal and operational costs.

What to check

1. 1

   Review and update privacy noticesHigh priority

   Ensure notices for both consumers and job applicants clearly describe data collection, use, and opt‑out options.

2. 2

   Audit digital properties for tracking technologiesHigh priority

   Scan websites, apps, and in‑store systems to identify and document all tracking tools.

3. 3

   Appoint a senior officer to certify CCPA complianceHigh priority

   Designate a corporate officer or director to provide annual compliance certification for the next four years.