California CPPA issues record US$1.35 million fine against Tractor Supply Company

Supply Company, under the California Consumer Privacy Act (CCPA). Tractor Supply agreed to settle the case and pay the fine after an investigation found that the company failed to notify consumers and job applicants of their privacy rights, used an ineffective “Do Not Sell My Personal Information” webform that did not stop tracking, ignored Global Privacy Control opt-out signals, and lacked proper contracts with service providers. 

‍

The settlement also requires Tractor Supply to implement quarterly inventory tracking, post annual updates for five years, and conduct an extensive review of data-related practices. This case highlights the growing state-level privacy enforcement and the need for retailers to strengthen their data governance. 

You can read the terms of the settlement here: https://cppa.ca.gov/pdf/20250930_tractor_supply_bd_sfo.pdf