Calif. AG: 75% Cure CCPA Violations in 30 Days

Three in four businesses that received notices of alleged privacy violations under the California Consumer Privacy Act (CCPA) cured problems in the 30-day period allowed by the law, state Attorney General Rob Bonta (D) said at a livestreamed Monday news conference. The other 25% include businesses under active investigation or within the 30-day window, he said. Bonta declined to say how many businesses received notices or which companies failed to cure and now face probes. He cited a few examples of alleged violations that businesses cured in response to notices, including an unnamed social media platform that users said was too slow to respond to CCPA requests and an online dating app that forced sharing of personal information during sign-up but didn't have a do-not-sell link as required by the law. "Businesses are motivated and able to comply with the law,” and the “vast majority” comply, said Bonta. No “gotchas,” he said. The AG launched an online tool on Monday so consumers can directly notify a business that lacks a clear and easy-to-find do-not-sell link on its website. Such consumer notices “may” trigger the 30-day cure period, he said. Bonta said he hopes for higher uptake from consumers clicking do-not-sell links to get CCPA protections. California started enforcing CCPA about a year ago.