CCPA Litigation Tracker
California became the first state in the country to provide a private cause of action to consumers for data breaches which exposed their sensitive personal information.
UPDATED AS OF APRIL 2025
Introduction & Key Findings
The private right of action is a key provision in the California Consumer Privacy Act (CCPA), which became effective on January 1, 2020, and allows California residents whose personal information is “subject to an unauthorized access and exfiltration, theft, or disclosure as a result of the business’ violation of the duty to implement and maintain reasonable security procedures and practices” to seek damages of $100-$750, per incident. This resource tracks cases to date that have cited CCPA.
If you have questions about an allegation that you have violated the CCPA, please contact our CCPA Strategic Defense Group for assistance.
*There are over 360+ cases that cite to the CCPA. Please contact our team directly for the full list.
About Our CCPA Strategic Defense Group
The first wave of CCPA-related class actions has been filed and numerous California consumers are already seeking redress in single-plaintiff claims and putative class actions. Patterns for CCPA consumer complaints often include coordinated activities to “set up” companies, and with the CCPA, this may mean flooding businesses with repeat requests to increase instances of compliance failure. Without a planned strategic defense, your company may be vulnerable to CCPA litigation abuse.
Perkins Coie’s CCPA Strategic Defense Group can help your company develop a solid pre-litigation strategy by anticipating potential claims and complaint enhancements, pre-planning invalidation tactics, and, should litigation arise, staying a step ahead during each stage of defense so your position is not inadvertently weakened.
Key Contacts
Notice
- Firmwide Chair, Consumer Products & Services Litigation
Notice
- Member, Firmwide Executive Committee
Notice
- Palo Alto Office Managing Partner
Notice
Notice
- Senior Attorney
Notice
