California Consumer Privacy Act (CCPA), Personal Information, Cookies

Cookies in the Cross-Hairs: Enforcement Continues

BCLP on 7/11/2025

In April of this year, the California Privacy Protection Agency imposed a $632,500.00 monetary penalty on American Honda Motor Co. In our discussion of that action - Are Cookies Banners Crumbling? – we raised the alarm for...more

Healthline to Pay $1.55M for Alleged CCPA Violations: Key Lessons for Businesses from Largest Settlement Yet

Fisher Phillips on 7/8/2025

Healthline Media has agreed to pay $1.55 million to resolve allegations that it violated the California Consumer Privacy Act (CCPA) – which is the largest settlement to date under the state’s landmark privacy law. The...more

Recent CCPA Decision Portends Potential Expansion of Class Action Liability Exposure For Cookies, Pixels, and Tracking...

Baker Donelson on 5/5/2025

Wild, wild, west? Web tracking may be the new frontier in class action litigation. With thousands of lawsuits filed in California and increasingly in other states against organizations, including many who may not realize the...more

Court Expands Scope of Private Actions Under California Consumer Privacy Act to Include Pixel Tracking Practices

Parker Poe Adams & Bernstein LLP on 4/30/2025

On March 3, 2025, the U.S. District Court for the Northern District of California issued a significant ruling that has the potential to broaden the risk of liability under the California Consumer Privacy Act (CCPA). ...more

What is Sufficient Consent?

Fox Rothschild LLP on 4/9/2025

The following is sufficient consent for the Video Privacy Protection Act and the California Invasion of Privacy Act, according to a recent decision in the U.S. District Court for the Northern District of California....more

CPPA Settles Alleged CCPA Violations with Honda

Robinson+Cole Data Privacy + Security Insider on 3/21/2025

Last week, the California Privacy Protection Agency (CPPA) settled its first non-data broker enforcement action against American Honda Motor Co. for a $632,500 fine and the implementation of certain remedial actions....more

Key Takeaways from CPPA’s Recent Settlement with an Automotive Manufacturer for Alleged CCPA Violations

Alston & Bird on 3/20/2025

On March 12, 2025, the California Privacy Protection Agency (CPPA) published its decision approving a Stipulated Final Order (Order) against a major automotive manufacturer (company) for violations of the California Consumer...more

Lessons from the CPPA’s $632,500 Settlement with Connected Vehicle Manufacturer

Wilson Sonsini Goodrich & Rosati on 3/20/2025

On March 12, 2025, the California Privacy Protection Agency (CPPA) announced a settlement with American Honda Motor Co. (Honda) over alleged violations of the California Consumer Privacy Act (CCPA). The CPPA investigated...more

CPPA Drives Home Enforcement Priorities in CCPA Settlement with Honda

Kelley Drye & Warren LLP on 3/17/2025

On March 12, 2025, the California Privacy Protection Agency (CPPA) announced a settlement with American Honda Motor Co., resolving allegations that the company violated the California Consumer Privacy Act (CCPA) and requiring...more

First Civil Penalties Under the CCPA Through $1.2 Million Settlement For Cookie “Sale” Violations

Benesch on 9/8/2022

The enforcement marks a step-up in scrutiny and enforcement as new amendments to the CCPA are set to come into force Jan. 1, 2023 and as enforcement moves from the CA Attorney General to the new California Privacy Protection...more

New York Sen. Gillibrand Proposes Data Protection Agency to Regulate Collection, Sharing of Personal Information

Harris Beach Murtha PLLC on 7/9/2021

A cynical online commenter once wrote this about the data collection practices of the online news site Digg: “If you are not paying for it, you’re not the customer; you’re the product being sold.” This is true of almost...more

[Webinar] CCPA / CPRA for US and EU businesses: Deep dive on CCPA's impact on European Businesses: A webinar for German and...

Spirit Legal on 12/1/2020

CCPA / CPRA for US and EU businesses - Deep dive on CCPA's impact on European Businesses: A webinar for German and European businesses. Main Topics - Is my business affected by CCPA and why? - I am already GDPR...more

Do most retailers take the position that the use of third party behavioral advertising cookies is, or is not, the “sale” of...

BCLP on 8/24/2020

Retailers are divided about whether the use of third party behavioral advertising cookies do, or do not, constitute the sale of personal information. One in four retailers (28%) utilize behavioral advertising cookies and take...more

Does the CCPA require a cookie banner when a business uses third-party persistent cookies?

BCLP on 7/6/2020

No. it is not clear whether persistent third party cookies do, or do not, constitute “personal information” under the CCPA. Among other things, whether the cookie can “reasonably be linked” to a particular consumer or...more

CCPA 2020: Answers to the Most Frequently Asked Questions Concerning Cookies and AdTech

BCLP on 3/11/2020

When the CCPA was enacted last year, BCLP published a Practical Guide to help companies reduce the requirements of the Act into practice. Following publication of the Guide, we wrote a series of articles that addressed...more

Ad Industry Split on Cookies and CCPA

BakerHostetler on 3/11/2020

Owners of websites and mobile applications that utilize cookies and other tracking technologies, e.g., pixels, app SDKs (tracking technologies), for interest-based advertising and other activities inherently share data across...more

Practitioners’ Corner: Third-Party Cookies in a Post-CCPA World

Davis Wright Tremaine LLP on 3/5/2020

Practitioner's Corner is a monthly focus on topics of interest to in-house counsel in the implementation of their privacy programs....more

January 2020: Survey of the Restaurant Industry’s Privacy Practices

BCLP on 1/21/2020

With the enactment of the European General Data Protection Regulation (“GDPR”) and the California Consumer Privacy Act ("CCPA”), the restaurant and food service industry has been forced to cope with a shifting privacy...more

CCPA is Here – Is Your Privacy Notice Ready?

Stoel Rives - Global Privacy & Security Blog® on 12/11/2019

Last year towards the end of May, a barrage of emails and pop-ups informed online users about how companies use cookies – small bits of software that track website activity – in accordance with a requirement under the...more

CCPA Privacy FAQs: Does the CCPA require that a company allow consumers to opt-out (e.g., toggle off) analytics cookies?

BCLP on 9/25/2019

It depends. The CCPA requires that a business that “sells” personal information disclose within its privacy policy a “list of the categories of personal information it has sold about consumers in the preceding 12 months.”...more

CCPA Privacy FAQs: If a company collects personal information through a cookie, is it required to provide a consumer with a...

BCLP on 9/9/2019

Maybe. Section 1798.100(b) of the CCPA states that a “business that collects a consumer’s personal information shall, at or before the point of collection, inform consumers as to the categories of personal information to...more

CCPA Privacy FAQs: If I post a “do not sell my personal information” link on my website, and opt out those consumers that select...

BCLP on 7/19/2019

Arguably no. While the definition of “sale” under the CCPA contains an exception for situations in which information is shared with a service provider, that exception may not apply to the extent that a behavioral...more

CCPA Privacy FAQs: What is the difference between a “first party cookie” and a “third party cookie ”?

BCLP on 7/3/2019

Generally speaking, cookies simply are data files saved to a user’s computer. Certain cookies may qualify as “personal information” under the CCPA, since the CCPA defines “unique personal identifiers,” to include “cookies”...more

California Consumer Privacy Act (CCPA) › Personal Information › Cookies

"My best business intelligence, in one easy email…"