California Privacy Penalties Focus on Quality Checks, Web Design

The California Privacy Protection Agency’s second enforcement action under the state’s privacy law signals that companies’ execution of consumer rights requests is at the center of the regulator’s priorities.

The CPPA—the only state privacy regulator of its kind in the US—on Tuesday hit Todd Snyder Inc. with a $345,178 fine for violating the California Consumer Privacy Act. It ordered the clothing retailer, owned by American Eagle Outfitters Inc., to change its privacy practices within 90 days.

The order came less than two months after the regulator’s first enforcement action under the privacy act, when it fined American Honda Motor ...