Enforcement and Penalties

Enforcement under the California Consumer Privacy Act and the California Privacy Rights Act is led by the state Attorney General, who can bring civil actions for violations and seek court orders to compel compliance. Penalties may reach $2,500 for each unintentional violation and $7,500 for each intentional violation, with additional fines for data-breach failures that give consumers a private right of action.