California AG Targets Streaming Services’ Privacy Compliance

California Attorney General Rob Bonta’s office announced Friday it was investigating the privacy practices of streaming services, alleging that popular apps and devices do not comply with the California Consumer Privacy Act.

“From watching live sporting events to blockbuster movies, families increasingly use streaming platforms for entertainment, and we must make sure that their personal information is protected,” Bonta said in a statement. “Today, we are taking a close look at how these streaming services are complying with requirements that have been in place since 2020.”

Specifically, Bonta’s office alleged that the services did not comply with the act’s requirement to let consumers opt out of their data being sold. That includes apps that don’t offer an easy mechanism for opting out. The office did not name any of the companies that were sent letters.

In terms of compliance, the attorney general said consumers using a smart TV should be able to navigate to the settings menu easily to opt out. Consumers should also have this opt-out choice honored across different devices if they are logged into their account, said Bonta.

The enforcement action comes as the California Privacy Protection Agency—another state entity who can also enforce state privacy law—finishes building out its enforcement team. The agency last year adopted updated regulations to current privacy rules, but those updates have been caught up in a lawsuit and have not gone into effect.

The attorney general has typically announced sweeps during Data Privacy Week. Last year, the office targeted popular mobile apps for noncompliance.

Unlike two years ago, there is no more 30-day cure period given to alleged violators to correct the infringement. Instead, the attorney general’s office is able to give cure periods on a case-by-case basis.