A company ignored my CCPA deletion request. How do I complain to the California Privacy Protection Agency?

Question

Accepted Answer

The CCPA is enforced by the California Privacy Protection Agency (CPPA) and the California Attorney General; individuals cannot sue over an ignored deletion request, because the private right of action in § 1798.150 covers only data breaches. First check that 45 days have passed since your request and that the business has not asked for identity verification you have not supplied. Then file a sworn complaint at cppa.ca.gov/webapplications/complaint, attaching your request, any replies, and the dates; the Agency can investigate and impose administrative fines of $2,500 per violation or $7,500 per intentional violation or violation involving minors (§ 1798.155, adjusted for inflation). You can also complain to the Attorney General at oag.ca.gov. Businesses must also give you a way to appeal internally in many other states. Re-sending a request that cites § 1798.105 and the 45-day deadline often prompts action. Generate one at https://takeitdown.agentexchange.work/request/privacy.

A company ignored my CCPA deletion request. How do I complain to the California Privacy Protection Agency?

Related