Full Breakdown
California Privacy Watchdog Fines GoFan for Data Violations
3/5/2026, 4:20:23 AM
Overview of the Fine Against GoFan
The California Privacy Protection Agency (CPPA) has imposed a $1.1 million fine on GoFan, a ticketing service owned by PlayOn Sports, for violating the California Privacy Protection Act. The violations stemmed from the company's practices of collecting and selling personal data from high school students who used the platform to purchase tickets for events such as football games, school plays, and prom. The CPPA's order, issued on February 27, 2024, highlighted that GoFan's users were compelled to agree to data collection terms without the option to opt out, thereby infringing on their privacy rights.
Key Findings of the CPPA Investigation
The CPPA's investigation revealed that GoFan misled users by stating in its privacy policy that it did not sell personal information, a claim that was found to be false. The policy was also not updated annually and failed to inform users about their rights to opt out of data sales, both of which are requirements under California law. The agency began its investigation in 2024 after receiving complaints from users regarding GoFan's data practices.
Implications for Student Privacy
Michael Macko, head of enforcement at CalPrivacy, emphasized the importance of protecting students' privacy, stating, “Students trying to go to prom or a high school football game shouldn’t have to leave their privacy rights at the door.” The CPPA's decision marks a significant step in addressing privacy violations specifically affecting students, who are considered a particularly vulnerable demographic. The board's order mandates that PlayOn Sports implement risk assessments, improve user disclosures, and establish effective opt-out methods for data collection.
Official Statements & Responses
In response to the CPPA's findings, PlayOn Sports acknowledged the inquiry and stated that it takes the privacy and safety of students seriously. The company indicated that it had begun revising its privacy policies prior to the investigation and has since resolved the issues identified by the CPPA. PlayOn Sports has contracts with approximately 1,400 schools in California and has sold over 30 million tickets to high school events nationwide.
Criticism of GoFan's Practices
Critics of GoFan's practices have raised concerns about the implications of targeted advertising on students. The CPPA's order noted that such advertising could lead to profiling that affects students long-term, potentially exposing them to harmful content. Furthermore, the company directed users to external opt-out mechanisms rather than providing its own, which was deemed insufficient and a violation of its responsibilities under state law.
What's Next for GoFan
Following the CPPA's ruling, GoFan is required to comply with California's privacy laws, particularly those prohibiting the sale or sharing of personal information from consumers aged 13 to 16 without affirmative consent. The company must also enhance its privacy practices to prevent future violations and protect the data of its users.
