California Consumer Privacy Act (CCPA), Enforcement Actions, Personal Data

States Continue Privacy Law Enforcement Efforts

Wiley Rein LLP on 7/17/2025

Recent enforcement activities in California and Connecticut highlight that states are ready and willing to actively enforce their comprehensive privacy laws. These recent actions – which continue the trend of states ramping...more

California Regulator Signals New Era in Privacy Enforcement

Hudson Cook, LLP on 5/1/2025

In March, 2025, the California Privacy Protection Agency announced a consent order with an auto manufacturer alleging multiple violations of the California Consumer Privacy Act and imposing a $632,500 fine for alleged failure...more

Key Takeaways from CPPA’s Recent Settlement with an Automotive Manufacturer for Alleged CCPA Violations

Alston & Bird on 3/20/2025

On March 12, 2025, the California Privacy Protection Agency (CPPA) published its decision approving a Stipulated Final Order (Order) against a major automotive manufacturer (company) for violations of the California Consumer...more

California Privacy Protection Agency Takes CCPA Enforcement Action Against Auto Maker for Alleged Violations of Consumer Privacy...

Hudson Cook, LLP on 3/14/2025

On March 7, 2025, the CPPA finalized a Stipulated Order against an automobile manufacturer (the "Company") alleging multiple violations of the California Consumer Privacy Act ("CCPA") ....more

CPPA Votes Out Proposed Delete Request and Opt-Out Platform (DROP) Data Broker Regulations

Wilson Sonsini Goodrich & Rosati on 3/13/2025

On March 7, 2025, the California Privacy Protection Agency (CPPA) Board met to discuss its proposed data broker regulations concerning the Delete Request and Opt-Out Platform (DROP) and voted to authorize CPPA staff to...more

Data Brokers Beware: Another Settlement for Violations of the California Delete Act

Robinson+Cole Data Privacy + Security Insider on 3/7/2025

The California Privacy Protection Agency (CPPA) and Background Alert, Inc. (a California-based data broker) settled allegations that Background Alert failed to register and pay the annual fee required by the California Delete...more

California Attorney General's Recent Enforcement of CCPA and COPPA

Venable LLP on 7/10/2024

On June 18, 2024, California Attorney General (AG) Rob Bonta announced a third CCPA enforcement settlement, this one with Tilting Point Media LLC. Tilting Point was allegedly using its mobile app game "SpongeBob: Krusty...more

Third CCPA Enforcement Settlement with California Attorney General and Los Angeles City Attorney Announced Against Mobile Game App

BakerHostetler on 6/24/2024

In a joint press release published on June 18, the California Attorney General and Los Angeles City Attorney announced a settlement with Tilting Point Media LLC (Tilting Point) in connection with alleged violations of the...more

California Attorney General Announces First CCPA Settlement Against Sephora

K&L Gates LLP on 9/8/2022

On 24 August 2022, the California Attorney General announced a US$1.2 million settlement including injunctive relief terms with cosmetic giant Sephora, Inc. (Sephora), resolving allegations that the company violated the...more

In First, Company Fined for Violating CCPA

Barnea Jaffa Lande & Co. on 9/6/2022

Sephora, the cosmetics giant of the LVMH group, must pay a USD 1.2 million fine for failure to comply with the California Consumer Privacy Act (CCPA), after receiving a warning from the California Attorney General and time to...more

California Attorney General Reaches $1.2 Million Settlement With Sephora as Part of His Office’s Continued Enforcement of the...

Saul Ewing LLP on 9/1/2022

The California Attorney General began exercising enforcement authority under the CCPA on January 1, 2020. Among the CCPA’s enumerated rights for consumers, the cornerstone of the CCPA, is the right to opt out of the...more

California Announces Increased Scrutiny on CCPA Violations with Latest $1.2 Million Enforcement Action Settlement

Bradley Arant Boult Cummings LLP on 8/31/2022

California’s Attorney General Rob Bonta has made clear that California Consumer Privacy Act (CCPA) enforcement is going to be a priority for the AG’s office. On Friday, the California AG’s office announced a $1.2 million...more

Colorado Privacy Act: Another Piece to the Data Privacy Puzzle

Ankura on 9/15/2021

Privacy laws have entered the compliance world by storm and are quickly changing data privacy practices. The most recent state, Colorado, passed the Colorado Privacy Act (CPA) into law on July 7, 2021. This new act follows...more

Jones Day Global Privacy & Cybersecurity Update | Vol. 28

Jones Day on 8/10/2021

UNITED STATES - Regulatory—Policy, Best Practices, and Standards - President Biden Issues Cybersecurity Executive Order - On May 12, 2021, President Biden issued an executive order that placed new standards on the...more

Colorado Privacy Act Passes With Nationwide Implications for Businesses

Chambliss, Bahner & Stophel, P.C. on 7/27/2021

After California and Virginia, Colorado recently became the third state to pass a comprehensive consumer data privacy bill. Although this new Colorado Privacy Act (CPA) overlaps with the California and Virginia privacy laws,...more

Top Operational Impacts of Virginia's New Privacy Law (CDPA)

Ankura on 6/28/2021

The Virginia Consumer Data Protection Act (CDPA) overwhelmingly passed both legislative chambers this month and is expected to be signed by the Governor in the coming weeks with an effective date of January 1, 2023. Best...more

Virginia Becomes the Second State—and the First on the Eastern Seaboard—to Adopt a Comprehensive Data Protection Law

Brooks Pierce on 3/31/2021

In March of 2021, Virginia became the second state to adopt a comprehensive data protection law. The Virginia Consumer Data Protection Act (VCDPA), which goes into effect on Jan. 1, 2023, borrows many concepts from the...more

“Data Knows No Borders”: Virginia’s Privacy Law Won’t Give Businesses Relief From The CCPA, But Consumers Nationwide Get...

Goodwin on 3/9/2021

On March 2, 2021, Virginia enacted the Consumer Data Protection Act (“VCDPA”). The VCDPA will become effective January 1, 2023. The VCDPA shares its roots with the California Consumer Protection Act (“CCPA”) and the recently...more

Privacy Moves to the East Coast: Virginia Set to Enact Comprehensive Consumer Data Protection Law

Bradley Arant Boult Cummings LLP on 2/8/2021

Virginia is primed to become the next U.S. state to pass comprehensive data-privacy legislation with striking similarities to the California Consumers Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and the...more

Washington, New York, and Minnesota Introduce New Privacy Laws to Begin the New Year

Perkins Coie on 1/28/2021

It’s a new year and it looks like 2021 is going to be another eventful one for privacy. In the past few weeks, we’ve seen several states introduce new privacy legislation, starting with Washington. On January 5, the...more

Update on Global Data Privacy Regulations by John Jackson

Jackson Walker on 8/26/2020

Cybersecurity and data privacy regulations were complicated well before the global pandemic. Since COVID-19 swept the world, Brazil has delayed enacting its new general data protection law, California's CCPA has gone through...more

Countdown to the California Consumer Privacy Act: Key Components Every Business Should Be Aware Of

Schwabe, Williamson & Wyatt PC on 11/27/2019

On January 1, 2020, the California Consumer Privacy Act (“CCPA”) becomes effective, and businesses around the world will be responsible for handling the personal information of Californians in accordance with the requirements...more

California Attorney General Issues Draft CCPA Regulations - The draft regulations help to clarify the requirements under the...

Jones Day on 10/15/2019

On October 10, 2019, the California attorney general released long-awaited proposed regulations under the California Consumer Privacy Act ("CCPA"). These regulations provide much-needed guidance on the CCPA requirements,...more

CCPA: Consumers and the Right to Sue

Proskauer - Minding Your Business on 6/3/2019

The California Consumer Privacy Act of 2018 (“CCPA”) is a California privacy law that gives consumers, defined as natural persons residing in California, affirmative rights with respect to their data privacy. Namely, the CCPA...more

Proposed Bill to Expand the CCPA’s Private Right of Action Likely Dead For the Year

Akin Gump Strauss Hauer & Feld LLP on 5/20/2019

• On May 16, 2019, the California Senate Appropriations Committee held Senate Bill 561 (SB-561) in committee, likely blocking its passage this term. • SB-561, co-authored by the California Attorney General, would have...more

California Consumer Privacy Act (CCPA) › Enforcement Actions › Personal Data

"My best business intelligence, in one easy email…"