CCPA Knowledge Hub

Three enforcement actions, $3.76M in combined fines, and a pattern so consistent it amounts to a design spec. A close reading of the Honda, Ford, and Disney CCPA settlements for privacy engineers and product teams who own the banner.

Honda and Ford were fined for the same pattern: requiring identity verification before processing a CCPA opt-out. A practitioner's guide to designing an opt-out form that scopes the request, honors the right, and doesn't trip the per-violation enforcement math.

The California Privacy Rights Act amended the CCPA in 2020 and took effect in 2023. Three years of enforcement later, the operational differences are clear: the 'share' right, the new sensitive-PI category, the CPPA as a dedicated regulator, and the cure period's disappearance. A practitioner's read on what changed and what it costs.

A deeply cited, implementation-first guide to CCPA cookie banner requirements after the Disney, Honda, Ford, and Healthline enforcement actions. Covers symmetrical choice under § 7004, the new 2026 GPC display rule, and how to build a banner that survives CPPA scrutiny.

A CCPA audit helps bridge the gap between your intentions and legally compliant, day-to-day data practices. Refreshed for 2026 with the post-Honda enforcement pattern.

CCPA reaches beyond California's borders, and by 2026 it runs alongside 19 other active state privacy laws. A practitioner's read on extraterritorial reach, applicability thresholds, and how to build one compliance baseline that covers the whole US.