California Consumer Privacy Act (CCPA), Opt-Outs, Enforcement

CCPA Compliance Alert: $1.55M Healthline Settlement

Jackson Lewis P.C. on 8/6/2025

On July 1, 2025, California Attorney General Rob Bonta announced the largest CCPA settlement to date, which included a $1.55 million penalty against Healthline Media LLC. This settlement sends a clear message to businesses...more

California Announces Dark Patterns as an Enforcement Priority

Cozen O'Connor on 9/25/2024

With a growing number of states having passed comprehensive consumer data privacy laws (19 in total, with seven passed this year alone), state enforcement actions related to data privacy are growing increasingly common....more

California Regulator Cautions Businesses Against the Use of Dark Patterns

Sheppard Mullin Richter & Hampton LLP on 9/23/2024

On September 4, the California Privacy Protection Agency (“CPPA”) issued an Enforcement Advisory cautioning businesses against the use of “dark patterns” in their consumer-facing user interfaces. The California Consumer...more

CPPA Enforcement Division Issues First Enforcement Advisory on Data Minimization

White & Case LLP on 5/9/2024

On April 2, 2024, the California Privacy Protection Agency's (CPPA) Enforcement Division issued its first enforcement advisory, titled "Applying Data Minimization to Consumer Requests," to further emphasize the importance of...more

CPPA’s First Enforcement Advisory Focuses on Applying Data Minimization Principles to Consumer Requests

Skadden, Arps, Slate, Meagher & Flom LLP on 4/19/2024

On April 2, 2024, the Enforcement Division of the California Privacy Protection Agency (CPPA) issued Enforcement Advisory No. 2024-01. This first-ever enforcement advisory focuses on promoting compliance with California...more

Maryland Legislature Passes Consumer Data Privacy Bill

Husch Blackwell LLP on 4/8/2024

Keypoint: Maryland’s bill diverges from other Washington Privacy Act variants passed to date with unique data minimization, sensitive data, minor’s data privacy, and unlawful discrimination provisions (among others)....more

California Appellate Court Empowers Privacy Agency to Immediately Enforce CPRA Regulations.

Foley & Lardner LLP on 2/16/2024

On February 9, a California appellate court issued a decisive ruling in favor of the California Privacy Protection Agency (the Agency), allowing the state to immediately begin enforcement of its new regulations, effectively...more

New Jersey Enacts Comprehensive Privacy Law

WilmerHale on 1/18/2024

On January 8, 2024, the New Jersey Assembly and Senate passed Senate Bill 332 (S. 332, or the “Act”), and it was signed into law by Governor Phil Murphy on January 16. This makes New Jersey the first state to enact a...more

Should You Wait to Comply with Updated CCPA Regulations Now that Enforcement Is Delayed? 6 Top Questions to Consider

Fisher Phillips on 8/14/2023

The first half of 2023 has been eventful for businesses subject to the California Consumer Privacy Act (CCPA), and the whirlwind of new developments may have left you confused about your current and pending obligations. In...more

California Attorney General Warns of Enforcement Focus on Mobile App Compliance with CCPA

White & Case LLP on 2/8/2023

On January 27, 2023 California Attorney General Rob Bonta ("Cal AG") announced a new enforcement sweep, aimed at businesses with mobile apps that do not comply with the California Consumer Privacy Act ("CCPA"). The...more

Trends in CCPA Enforcement from 2021 to 2022 – Try Harder

Ankura on 1/26/2023

This is the third article in a three-part series whereby Ankura privacy experts analyzed the 40 examples of alleged non-compliance with the California Consumer Privacy Act (CCPA) published by the California Office of Attorney...more

The Compliance Clock is Ticking: Prepare for the California Privacy Sprint to January 1st

Buchalter on 11/2/2022

The amended California Consumer Privacy Act (CCPA), sometimes referred to as the California Privacy Rights Act (CPRA) or Proposition 24, takes effect on January 1, 2023 – and introduces new consumer rights, while...more

California AG Issues First Fine for CCPA Violations

Wiley Rein LLP on 9/19/2022

The California Attorney General (AG) made headlines in August by issuing a $1.2 million fine against online retailer Sephora to resolve allegations that the business violated the California Consumer Privacy Act (CCPA). This...more

The Sun is About to Set on Temporary CCPA/CPRA Exemptions: Employers Get Ready

Mintz - Privacy & Cybersecurity Viewpoints on 9/15/2022

If you’ve relied on the temporary “exemption” for employee/applicant and business-to-business (B2B) personal information under the California Consumer Privacy Act (CCPA), those exemptions will expire on January 1, 2023. The...more

California Attorney General Provides Key Enforcement Insights to Employers on CCPA Obligations

Fisher Phillips on 9/8/2022

With the entire panoply of compliance requirements under the California Consumer Privacy Act of 2018 (CCPA) and the California Privacy Rights Act (CPRA) set to take effect on January 1, 2023, now is the time for employers to...more

CCPA Update: Cal. AG Releases Thirteen New Enforcement Case Examples

Husch Blackwell LLP on 8/30/2022

Keypoint: The thirteen new enforcement case examples – released just a few months before the CCPA’s right to cure sunsets – provide further insight into the Attorney General’s enforcement priorities....more

California Attorney General Announces First CCPA Settlement

McDermott Will & Schulte on 8/25/2022

On August 24, 2022, the California Attorney General (AG) announced a first-of-its-kind settlement with Sephora, Inc. (Sephora) over Sephora’s alleged violation of the California Consumer Privacy Act (CCPA). The settlement...more

CCPA Enforcement – California AG Bonta Announces Settlement with Sephora

Rothwell, Figg, Ernst & Manbeck, P.C. on 8/25/2022

California Attorney General Rob Bonta announced yesterday a settlement reached with beauty product retailer, Sephora, Inc. (Sephora), resolving allegations that Sephora violated various provisions of the California Consumer...more

First California AG Enforcement Action Under CCPA – And It’s a Big One

Mintz - Privacy & Cybersecurity Viewpoints on 8/25/2022

California Attorney General Rob Bonta has announced a major settlement under the California Consumer Privacy Act (CCPA), and it will cost Sephora, Inc. a whopping $1.2 million in penalties. According to the release from...more

Connecticut Poised to Become Fifth State to Enact Comprehensive Consumer Data Privacy Law

Foley & Lardner LLP on 5/6/2022

On May 4, 2022, the Connecticut legislature passed S.B. 6 entitled the “Connecticut Data Privacy Act” (CDPA) with the bill now moving to Governor Ned Lamont’s desk for signature. Although Governor Lamont is generally expected...more

Connecticut is on the Privacy Move

Mintz - Privacy & Cybersecurity Viewpoints on 5/4/2022

On April 28, 2022, the Connecticut legislature took the final step to become very close to passing comprehensive consumer privacy legislation as the Connecticut House of Representatives voted 144-5 in favor of Senate Bill 6,...more

Virginia Consumer Data Protection Act Work Group Issues 2021 Final Report

Husch Blackwell LLP on 11/2/2021

Keypoint: The VCDPA Work Group’s final report contains 17 “points of emphasis” derived from six Work Group meetings; however, the Work Group’s recommendations for modifying the VCDPA will not be presented until the...more

CCPA Update: Analysis And Key Takeaways From AG’s Example Enforcement Cases

Husch Blackwell LLP on 8/12/2021

Keypoint: A detailed analysis of the Attorney General’s twenty-seven published examples of noncompliance notices sent during the first year of CCPA enforcement reveals key learnings for CCPA compliance efforts. In July,...more

And Now There Are Three…. The Colorado Privacy Act

Mintz Edge on 8/3/2021

Colorado has now joined California and Virginia to become the third US state to pass a comprehensive data privacy legislation when Governor Jared Polis signed the Colorado Privacy Act (the “CPA”) into law on July 8, 2021. The...more

California Sheds Light on Consumer Privacy Dark Patterns

Pillsbury - Internet & Social Media Law Blog on 3/30/2021

On March 15, amendments to the California Consumer Privacy Act (CCPA) banned companies from using “dark patterns” that confuse or delay consumers trying to opt out of the sale of their personal information....more

California Consumer Privacy Act (CCPA) › Opt-Outs › Enforcement

"My best business intelligence, in one easy email…"