This infographic breaks down the first major enforcement action under the CCPA, using Sephora as a real-world case study. It explains how Sephora’s use of third-party tracking technologies constituted a “sale” of personal data and why failing to provide opt-out mechanisms violated the law. The infographic highlights Sephora’s failure to honor Global Privacy Control signals and its inability to cure violations within the required timeframe. It outlines the resulting $1.2 million penalty and mandated remediation steps, including updating disclosures and contracts. The infographic serves as a cautionary example of enforcement risk and the importance of honoring opt-out signals and vendor controls.

Join for free to read