On August 6, the California Privacy Protection Agency (CPPA) filed a petition in the Superior Court of California for the court to enforce an investigative subpoena against a company for allegedly failing to comply with a request for information regarding its compliance with the California Consumer Privacy Act (CCPA). The CPPA’s Enforcement Division began investigating the company after a consumer complaint in early 2024 and focused on whether the company violated users’ privacy rights, including failing to honor opt-out requests regarding personal information. According to the CPPA’s press release, this is the first public disclosure of an ongoing investigation and its first judicial action to enforce a request.
CPPA alleged the company did not update its privacy policy since November 2021, missing the CCPA’s 12-month update requirement and failing to provide required consumer notices. In January 2025, CPPA served the company with an investigative subpoena seeking information about its privacy practices from January 1, 2020, to the present. The company refused to answer questions about its business practices before January 1, 2023, claiming that its earlier practices fell outside the agency’s enforcement authority due to the timing of CPPA’s regulations. CPPA averred the CCPA has been operative since January 1, 2020, and that the company’s position conflicted with established legal precedent. The CPPA requested the court order the company to provide responses to its interrogatories and grant any relief necessary.
[View source.]
