Kilpatrick Townsend

Insights: Publications

Lessons Learned 3 Years After First CCPA Enforcement Action

Law360

August 21, 2025

Written by Tatum Andres

Aug. 24 marks the three-year anniversary of California Attorney General Rob Bonta's first public enforcement action under the California Consumer Privacy Act: a $1.2 million settlement with beauty retailer Sephora.

Since that landmark case, Bonta has pursued a steady stream of enforcement actions across industries, targeting companies that fail to comply with the CCPA's requirements for collecting, sharing and disclosing consumer personal information. Three years in, a clearer picture has emerged of how the law is being interpreted and enforced, and what that means for businesses moving forward.

Click here or "Download PDF" to read more from Tatum Andres

Related People

Tatum Andres

tandres@ktslaw.com