Cosmetics Giant Sephora to Pay $1.2 Million Privacy Settlement

guest · Sep 3, 2022

By Phil Muncaster UK / EMEA News Reporter, Infosecurity Magazine - August 26, 2022

One of the world’s biggest cosmetics retailers has agreed to pay $1.2 million in penalties and take corrective action after falling foul of the California Consumer Privacy Act (CCPA).

Announced by the state’s attorney general, Rob Bonta, this week, the settlement by Sephora is part of the administration’s efforts to enforce a law that came into force over two years ago.

“I hope today’s settlement sends a strong message to businesses that are still failing to comply with California’s consumer privacy law,” said Bonta in a statement.
“My office is watching, and we will hold you accountable. It’s been more than two years since the CCPA went into effect, and businesses’ right to avoid liability by curing their CCPA violations after they are caught is expiring. There are no more excuses. Follow the law, do right by consumers, and process opt-out requests made via user-enabled global privacy controls.”
Click to expand...

As part of the settlement, Sephora has agreed to:

Clarify its privacy policy to state that it sells data

Provide a way for consumers to opt out of the sale of personal information

Tweak its service provider agreements to meet the CCPA’s requirements

Provide reports to the attorney general relating to its sale of personal information and the status of its service provider relationships

Click to expand...

A “number” of other businesses have also been targeted by Bonta and will have 30 days to comply with the CCPA.
Click to expand...

Attorney General Bonta Announces Settlement with Sephora as Part of Ongoing Enforcement of California Consumer Privacy Act

OAKLAND – California Attorney General Rob Bonta today announced a settlement with Sephora, Inc. (Sephora), resolving allegations that the company violated the California Consumer Privacy Act (CCPA), California’s first-in-the-nation landmark privacy law. After conducting an enforcement sweep of online retailers, the Attorney General alleged that Sephora failed to disclose to consumers that it was selling their personal information, that it failed to process user requests to opt out of sale via user-enabled global privacy controls in violation of the CCPA, and that it did not cure these violations within the 30-day period currently allowed by the CCPA.
Click to expand...

Today's settlement is part of ongoing efforts by the Attorney General to enforce California's comprehensive consumer privacy law that allows consumers to tell businesses to stop selling their personal information to third parties, including those signaled by the Global Privacy Control (GPC).

“Technologies like the Global Privacy Control are a game changer for consumers looking to exercise their data privacy rights. But these rights are meaningless if businesses hide how they are using their customer's data and ignore requests to opt-out of its sale,” said Attorney General Bonta.
Click to expand...

Log in or Sign up

Cosmetics Giant Sephora to Pay $1.2 Million Privacy Settlement

guest Guest

Log in or Sign up

Cosmetics Giant Sephora to Pay $1.2 Million Privacy Settlement

guest Guest

Useful Searches