The report, titled “Private Litigation Under the California Consumer Privacy Act,” examines the private actions filed under the CCPA since its effective date.

Executive Summary
In June of 2018, the Governor of California signed the California Consumer Privacy Act (CCPA) into law. The law went into effect on January 1, 2020, and the Attorney General promulgated regulations to implement the CCPA in August 2020. Broadly, the CCPA is designed to protect consumer privacy by providing transparency into the personal data that businesses collect and share, and giving consumers the right to prevent companies from sharing their data with third parties. Although these core privacy provisions are enforced exclusively by the California Attorney General, the CCPA provides a private right of action when a business’s failure to implement “reasonable security practices and procedures” results in the theft of personal information.

Please click here to read the report.