Consumer Data Protection
Enforcing your right to control your personal data under the California Consumer Privacy Act and California Privacy Rights Act.
The CCPA and CPRA give California consumers the right to know what personal information businesses collect, the right to delete it, the right to opt out of its sale or sharing, and the right to non-discrimination for exercising these rights. Businesses that fail to honor these rights face enforcement actions and, in the case of data breaches, private lawsuits with statutory damages of $100–$750 per consumer per incident.
Available through our Los Angeles office for California residents.
Your Rights Under the CCPA/CPRA
California consumers have comprehensive rights over their personal data:
- Right to know what personal information is collected and how it is used
- Right to delete personal information held by businesses
- Right to opt out of the sale or sharing of personal information
- Right to correct inaccurate personal information
- Right to limit use and disclosure of sensitive personal information
- Right to non-discrimination for exercising any of these rights
Accessibility of Privacy Controls
CCPA regulations require that privacy notices, opt-out mechanisms, and consumer rights interfaces be accessible to consumers with disabilities. When businesses fail to make their "Do Not Sell My Information" links or cookie consent mechanisms accessible, they simultaneously violate the CCPA's accessibility requirements and the ADA/Unruh Act.
Private Right of Action
The CCPA provides a private right of action for data breaches involving unencrypted or unredacted personal information. Statutory damages range from $100 to $750 per consumer per incident, or actual damages — whichever is greater. For large-scale breaches, these damages can be substantial.