FedEx: $2.975M California privacy fine

CalPrivacy ordered Federal Express to pay a $2.975 million administrative fine and change its practices after the company said it did not sell or share personal information while taking part in cross-context behavioral advertising.

  • CCPA
  • California
  • Last updated

Enforcement snapshot

Amount
$2.975M
Regulator
CalPrivacy
Sector
Shipping and logistics
Published
November 2026

Technical failure modes

What failed

01. The sale and share disclosure did not match the advertising

The Enforcement Division alleged Federal Express said it did not sell or share personal information while it took part in cross-context behavioral advertising.

02. Opt-out preference signals were not honored

The Board's decision states the company failed to honor opt-out preference signals.

03. The CCPA webform skipped online tracking technologies

The request webform did not apply to online tracking technologies, so a consumer request did not reach the cookies and pixels doing the sharing.

04. Cookie controls did not work

Controls meant to address online tracking technologies did not work. Where a cookie notice is the opt-out, the order requires it to explain how it applies to sale or sharing and to link to the place the consumer makes that choice.

Next step

Do not wait for a demand letter to find the gap

The Board's decision says opt-out preference signals were not honored, the CCPA request webform did not cover online tracking technologies, and the cookie controls did not work. Bloomberg Law reported that CalPrivacy said FedEx shared customer data with Meta, Google, LinkedIn, and Adobe through cookies and pixels.

Get Started Free

Get started in less than 5 min