On November 21, 2025, California Attorney General Rob Bonta announced CA’s sixth enforcement action – a $1.4 million settlement against Jam City, Inc., a mobile app publishing company, over allegations that it illegally collected and shared children’s data without proper consent in violation of the California Consumer Privacy Act (CCPA).
Jam City creates games for mobile platforms, including games based on popular franchises such as Frozen, Harry Potter, and Family Guy. Jam City generates revenue, in part, through disclosing personal information for advertising.
In addition to the $1.4 million in civil penalties, the settlement requires Jam City to add in-app tools that allow users to opt out of the sale or sharing of their personal data. The company is also prohibited from selling or sharing the personal information of users aged 13 to under 16 unless they provide clear, affirmative “opt-in” consent.
According to the California Attorney General’s Office, the apps collected personal information from children under the age of 13 without providing an in-app opt out mechanism – a clear violation of CCPA. Additionally, the company failed to provide adequate disclosures under the CCPA, which provides California residents enhanced rights over their personal data. Specifically, Jam City did not provide an opt out link in any of its 21 mobile apps – instead the only reference to a consumers’ opt out right was in its privacy policy under a section titled “Cookies and Internet Based Advertising” where Jam City informed consumers they could email it to stop targeted advertisements.
“Many Californians like to unwind after a long day by gaming on their cell phones. Even on apps, California law obligates companies to provide a way for consumers to opt-out of the sale and sharing of their personal data,” said Attorney General Bonta. “This process should be simple, transparent, and easy to navigate. My office is committed to the continued enforcement of the CCPA — including by ensuring that mobile gaming companies follow the law so consumers can exercise their right to protect their privacy.”
The mobile apps allegedly integrated third-party advertising and analytics software that harvested data- including precise location information and identifiers for targeted advertising purposes.
As part of the agreement, Jam City must:
- Pay $1.4 million in civil penalties;
- Implement verifiable parental consent mechanisms for child users;
- Refrain from selling or sharing data from users aged 13–15 without affirmative opt-in consent;
- Add clear in-app methods to allow consumers to opt out of the sale or sharing of their personal information
CIPAWorld 