Golden State Today

California Attorney General Rob Bonta has announced a formal collaboration between seven states and the California Privacy Protection Agency (CPPA) to enhance privacy rights for consumers. This collaboration, known as the Consortium of Privacy Regulators, involves attorneys general from California, Colorado, Connecticut, Delaware, Indiana, New Jersey, and Oregon. They aim to share information and coordinate enforcement based on common interests in privacy law.

Attorney General Bonta stated, “Data knows no borders — state and nationwide coordination is vital for protecting consumers’ rights, especially in our data-driven world.” He emphasized the importance of collaboration as a tool for tackling enforcement priorities and safeguarding Californians' privacy rights.

Privacy protection is critical, especially as more consumers engage in online activities such as banking, shopping, or managing medical care. Businesses collecting personal information pose risks of data breaches if they fail to protect it. When privacy laws lapse, sensitive information, including financial status or health details, may be disclosed, making individuals vulnerable.

The California Consumer Privacy Act (CCPA) was highlighted as a landmark privacy law, providing increased rights for California consumers and responsibilities for businesses. The CCPA gives consumers the right to know about their data collection and sharing and to opt-out of personal data sales.

Attorney General Bonta remains committed to consumer education and enforcing California's stringent data privacy laws. Last month, he issued a consumer alert to 23andMe customers about their rights under the Genetic Information Privacy Act and the CCPA. He also investigated the location data industry due to concerns over the widespread collection and sale of location data.

Bonta has taken enforcement actions concerning CCPA violations. In 2022, Sephora settled allegations of undisclosed personal data sales and non-compliance with opt-out requests. In 2023, a settlement was secured with DoorDash for similar issues. In 2024, cooperation with local partners led to a settlement with Tilting Point Media over illegal data collection and sharing involving children.

More information about the CCPA and reporting violations is available at www.oag.ca.gov/ccpa.