- 1798.100 – Consumers right to receive information on privacy practices and access information
- 1798.105 – Consumers right to deletion
- 1798.110 – Information required to be provided as part of an access request
- 1798.115 – Consumers right to receive information about onward disclosures
- 1798.120 – Consumer right to prohibit the sale of their information
- 1798.125 – Price discrimination based upon the exercise of the opt-out right
February 01, 2021
USDC Northern District of California
Hashemi and Altes, et al.
Putative class action against a hair clinic. Defendant is alleged to have failed to properly protect PII (names, social security numbers, financial account and/or payment card numbers, and driver's license numbers). Defendant is further alleged to have failed to adequately notify plaintiffs of the unauthorized disclosure of their PII. The data breach is alleged to have occurred on or about August 17, 2020 through September 24, 2020. Complaint alleges a violation of the CCPA § 1798.150(a): Failure to implement and maintain reasonable security procedures sufficient to protect PII. Plaintiffs also bring various claims for negligence, breach of confidence, and violation of CA's Unfair Competition Law § 17200 et seq.