Wyrick Robbins – The California Attorney General recently delivered a public CCPA enforcement action against DoorDash, its second following the 2022 settlement with Sephora.
The DoorDash action stems from a notice of violation alleging that DoorDash’s personal information disclosures to a marketing co-op constituted a “sale” under the CCPA and that DoorDash failed to comply with CCPA “sale” opt-out and disclosure requirements. The complaint also asserted violations of CalOPPA, California’s 2004 website privacy policy law. The proposed stipulated judgement would require DoorDash to pay a $375,000 penalty, update its privacy policy, review its contracts to identify any “sale” of its customers’ data, and report annually to the AG.
Source:
- Wyrick Robbins
No Money, Mo’ Problems: DoorDash CCPA Enforcement Action Emphasizes Personal Information “Sales” Aren’t All About the Benjamins
