The state of California has fined youth sports media company PlayOn Sports $1.1 million for privacy violations. The California Privacy Protection Agency (CPAA) Board found that PlayOn’s ticketing platform, GoFan, failed to provide users with an opt-out option for data collection.
“According to the Board’s decision, PlayOn Sports used tracking technologies to collect personal information and deliver targeted advertisements to ticketholders and others using its services,” the state of California announced in a statement dated March 3.
The California Privacy Protection Agency Board stated that, before users could use their tickets, the company allegedly required them to click “agree” to these tracking technologies without offering a sufficient opt-out option.
The CPAA charged PlayOn Sports with violating the California Privacy Protection Act. Additionally, the state of California accused PlayOn Sports of failing to adequately inform users of its privacy policies.
“Students are a uniquely vulnerable population whose data should be used to enhance their own learning, not to fuel advertising and commercial surveillance,” the statement continued.
Response to the settlement agreement by PlayOn Sports
PlayOn Sports has a reported annual gross revenue of over $26 million. It has contracts to offer digital ticketing services with about 1,400 schools in California.
According to the disciplinary order, the company “does not admit liability for any violation” of state law. In December 2024, PlayOn also reportedly made a significant change to its privacy policy. It now allows users to opt out of data collection, bringing the company into compliance with state law. In an email to CalMatters, James Dickinson, PlayOn’s senior vice president of marketing, said the company has “fully resolved” the data privacy matters.
“Students trying to go to prom or a high school football game shouldn’t have to leave their privacy rights at the door,” said Michael Macko, CalPrivacy’s head of enforcement. “You couldn’t attend these events without showing your ticket, and you couldn’t show your ticket without being tracked for advertising. California’s privacy law does not work that way. Businesses must ensure they offer lawful ways for Californians to opt-out, particularly with captive audiences.”
Update: Full statement from PlayOn
“PlayOn takes the privacy and safety of the students and school communities we serve very seriously. The CPPA’s recent inquiry was focused on certain aspects of PlayOn’s privacy practices prior to December 2024, and those matters have since been fully resolved. Before we were aware of the CPPA’s inquiry, PlayOn had already proactively implemented enhancements to its privacy practices, including the launch of OneTrust in December 2024 — a digital consumer data preference platform designed to strengthen user control and transparency. Throughout the review process, we worked cooperatively with the CPPA and took additional steps to address its concerns.
“In its Stipulated Final Order fully resolving the matter (see page 11, paragraph 66) where the CPPA explicitly ‘recognizes and credits PlayOn’s remediation efforts’ and notes that these changes were made ‘even before PlayOn learned about the Agency’s investigation.’
“We are pleased to have resolved this matter and will continue investing in strong privacy protections that reflect both evolving regulatory expectations and our deep commitment to the students and school communities we serve.”