CCPA Enforcement Has Begun….

Last week, the California Attorney General’s office confirmed that on July 1, the first date of the AG’s statutory enforcement authority, the office sent its first set of CCPA enforcement letters. Do not ignore these letters. The statute provides businesses 30 days to cure the listed violations before the AG’s office may commence an investigation or initiate a lawsuit. You have time to cure the violation! Although no specific entity or violations have been disclosed, the Attorney General’s office has indicated that no one industry or sector was targeted in the July 1 enforcement letters but that all the businesses operated online and were required to come into compliance with the required online statements or mechanisms. Notably, they described the opt-out right as the most important CCPA right (also the easiest to allege a claim upon) and suggested businesses that sell personal information ensure that the “do not sell my info” link is posted clearly and conspicuously on the homepage.