As the California Privacy Protection Agency commenced closely watching data brokers, its Board voted to adopt proposed regulations (Proposed Regs) that expand upon and clarify key provisions of the Delete Act, broadening the definition of data broker. At the same time, it reached settlements with two data broker companies about a week after it had announced that it was beginning a public investigative compliance sweep. This article, with insights from experts at Frankfurt Kurnit, Troutman Pepper and WilmerHale, examined how the Proposed Regs expand upon some of the Delete Act’s central requirements and offered practical measures for data brokers on how to meet their compliance obligations.