The California Privacy Protection Agency has fined a Texas-based marketing firm $45,000 and barred it from selling Californians’ personal information after determining the company unlawfully bought and resold sensitive health and demographic data without registering as a data broker, state officials said.