With the rise in comprehensive state privacy laws, states are taking different approaches to informing the public of the details of the enforcement actions taken by their respective enforcement authorities. For example, Connecticut has opted to issue periodic reports providing updates as to its broader privacy efforts, the consumer complaints it received, and its takeaways and updates from enforcement efforts. While enforcement actions work to correct unlawful behavior, they also serve as a guide for businesses to assess what issues enforcement authorities are prioritizing.
Alternatively, the California Attorney General (“AG”) and California Privacy Protection Agency (“CPPA”), the state agencies responsible for implementing and enforcing the California Consumer Privacy Act (“CCPA”), issue press releases of their settlements under the CCPA. Between these enforcement authorities, there have been a total of 5 settlements for alleged violations of the CCPA, with fines averaging approximately $610,535, against the following businesses: (1) Sephora, (2) DoorDash, (3) Tilting Point Media LLC, (4) American Honda Motor Co. (“Honda”), and (5) Todd Snyder. The first three enforcement actions were brought by the California AG, and the latter two by the CPPA.
