Back to Explorer
CCPARetailHigh Severity

Sephora

€1,050,000

Authority

California AG

Country

United States

Date Issued

August 24, 2022

Industry

Retail

Summary

Sephora settled a landmark $1.2 million CCPA enforcement action for failing to disclose that it was selling consumer data and ignoring Global Privacy Control opt-out signals. This was the first major enforcement action under the California Consumer Privacy Act.

Violation Types

TransparencyData CollectionData Subject Rights

Articles Violated

CCPA

Avoid enforcement risk with automated compliance

IQWorks helps organizations automate CCPA compliance before regulators come knocking.

Talk to an Expert