- 1798.100 – Consumers right to receive information on privacy practices and access information
- 1798.105 – Consumers right to deletion
- 1798.110 – Information required to be provided as part of an access request
- 1798.115 – Consumers right to receive information about onward disclosures
- 1798.120 – Consumer right to prohibit the sale of their information
- 1798.125 – Price discrimination based upon the exercise of the opt-out right
January 20, 2021
3:21-cv-0190-LAB (originally 3:21-cv-00494)
USDC Southern District of California
Rodriguez et al.
Putative class action against a bank. Defendant is alleged to have failed to prevent the unauthorized access of cardholder PII by third parties, resulting in theft or unauthorized disclosure. Complaint alleges a violation of the CCPA § 1798.150: failing to implement and maintain reasonable security procedures sufficient to prevent plaintiffs' PII from unauthorized access. Plaintiffs also bring various claims for violation of CA's Unfair Competition Law § 17200 et seq., violation of the Electronic Funds Transfer Act (15 U.S.C. § 1693 et seq. and 12 C.F.R. § 1005.11), negligence, breach of express contract, breach of implied contract, breach of implied covenant of good faith and fair dealing, and unjust enrichment. Transferred from USDC Northern District of California to USDC Southern District of California.