California fines GoFan $1.1m
Change
California’s privacy regulator ordered GoFan to pay a $1.1m fine on 27 February for repeated violations tied to collecting and selling high-school students’ personal information to advertisers in 2023–24.
Why it matters
GoFan’s ticketing software required users to press an “agree” button to proceed with buying tickets and did not offer an opt-out. The 27 February order said this design led to repeated violations in 2023–24 involving collection of personal information and its sale to advertisers. The California Privacy Protection Act gives California residents the right to know their private information has been collected and to block companies from selling it. PlayOn said the inquiry focused on certain privacy practices prior to December 2024 and that the matters have been fully resolved. The order states PlayOn has sold more than 30m tickets nationwide and has contracts with about 1,400 schools in California.
Implications
- • Ticketing checkout and consent flows that condition purchase on accepting tracking for advertising without an opt-out are treated as violations under the cited California privacy rights.
- • Operators selling personal information to advertisers must support user controls to block sale of that information for California residents.
Unlock the decision layer.
See what the change means — implications, exposure, timing — and ask AI about any brief instantly.
- Implications: What actually changes downstream.
- Who is affected: Which teams or operators are exposed.
- What to watch: Deadlines, triggers, and next moves.
- Ask AI: Clarify any brief instantly, in context.
14-day free trial. Full access. No credit card required.
Start free trial
Source
Topics