Ahead of Data Privacy Day, California Attorney General Rob Bonta has initiated an investigative sweep, targeting businesses operating popular streaming applications and devices. The action alleges potential violations of the California Consumer Privacy Act (CCPA). The focus of this year’s scrutiny is on how Streaming Services adhere to the CCPA’s opt-out provisions, particularly for companies involved in selling or sharing consumer personal data. This includes services that may not offer straightforward mechanisms for users to prevent the sale of their information.
“Families are increasingly turning to streaming platforms for their entertainment needs, from live sports to the latest movies. It’s crucial that their personal information is protected in this digital age. California led the nation by establishing the legal right for consumers to say to businesses, ‘do not sell my data.’ We are now carefully examining how streaming services are meeting these requirements, which have been in effect since 2020,” stated Attorney General Bonta. He further encouraged consumers to utilize Data Privacy Day as an opportunity to understand and exercise their rights under the California Consumer Privacy Act, especially the right to stop businesses from selling their personal information.
The California Consumer Privacy Act stands as a landmark piece of legislation, bolstering privacy rights for California consumers. It grants rights such as knowing how businesses collect, share, and disclose their personal data. Businesses falling under CCPA jurisdiction have specific obligations. These include responding to consumer requests to exercise their rights and providing clear notices explaining their data privacy practices.
A core component of the CCPA is the right to opt out. Businesses that sell personal information, or share it for targeted advertising, must legally provide consumers with the right to opt-out of this data sharing. Exercising this right should be user-friendly and require minimal steps. For example, a consumer using a Smart TV should be able to easily navigate to the settings menu within a streaming service’s mobile application and activate a “Do Not Sell My Personal Information” setting. Ideally, this preference should be respected across all devices where the consumer is logged into their account when the opt-out request is made. Furthermore, a streaming service’s privacy policy, detailing CCPA rights, should be easily accessible to consumers.
Attorney General Bonta has demonstrated a strong commitment to enforcing data privacy laws. In August 2022, a settlement was reached with Sephora regarding allegations that the company failed to inform consumers about selling their personal data and did not properly process opt-out requests made through global privacy controls. This enforcement action underscores the Attorney General’s dedication to ensuring businesses comply with CCPA regulations. For detailed information about the CCPA, consumers can visit www.oag.ca.gov/ccpa. To report a potential CCPA violation to the Attorney General, complaints can be submitted online at www.oag.ca.gov/report.
