Sephora to pay $1.2M, plus has dubious distinction of being the subject of California’s first major privacy settlement
A sweep of online retailers found Sephora Cosmetics was selling customer data without consent to third party online tracking companies without consent, which is illegal under the California Consumer Privacy Act (CCPA). The company’s $1.2 million fine marks the first major settlement since CCPA went into effect. Violations included not notifying customers and failures to process customer opt-out requests.