CCPA Litigation Tracker

California became the first state in the country to provide a private cause of action to consumers for data breaches which exposed their sensitive personal information.

UPDATED AS OF APRIL 2025

Introduction & Key Findings

The private right of action is a key provision in the California Consumer Privacy Act (CCPA), which became effective on January 1, 2020, and allows California residents whose personal information is “subject to an unauthorized access and exfiltration, theft, or disclosure as a result of the business’ violation of the duty to implement and maintain reasonable security procedures and practices” to seek damages of $100-$750, per incident. This resource tracks cases to date that have cited CCPA.

If you have questions about an allegation that you have violated the CCPA, please contact our CCPA Strategic Defense Group for assistance.

Subscribe here to receive our weekly CCPA Litigation Digest.

*There are over 360+ cases that cite to the CCPA. Please contact our team directly for the full list.

About Our CCPA Strategic Defense Group

The first wave of CCPA-related class actions has been filed and numerous California consumers are already seeking redress in single-plaintiff claims and putative class actions. Patterns for CCPA consumer complaints often include coordinated activities to “set up” companies, and with the CCPA, this may mean flooding businesses with repeat requests to increase instances of compliance failure. Without a planned strategic defense, your company may be vulnerable to CCPA litigation abuse.

Perkins Coie’s CCPA Strategic Defense Group can help your company develop a solid pre-litigation strategy by anticipating potential claims and complaint enhancements, pre-planning invalidation tactics, and, should litigation arise, staying a step ahead during each stage of defense so your position is not inadvertently weakened.

Key Contacts

Core Team

Sunita Bali

Partner

Notice

Before proceeding, please note: If you are not a current client of Perkins Coie, please do not include any information in this e-mail that you or someone else considers to be of a confidential or secret nature. Perkins Coie has no duty to keep confidential any of the information you provide. Neither the transmission nor receipt of your information is considered a request for legal advice, securing or retaining a lawyer. An attorney-client relationship with Perkins Coie or any lawyer at Perkins Coie is not established until and unless Perkins Coie agrees to such a relationship as memorialized in a separate writing.

415.344.7065