Data Privacy > CCPA & CPRA
The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives California residents rights over personal information collected by covered businesses. These rights include knowing what information a business collects, requesting deletion or correction, and opting out of certain sales and sharing. The CPRA expanded the CCPA rather than creating a separate privacy law.
Subject to applicable exceptions, California residents can request access to their personal information, delete information, correct inaccuracies, and opt out of its sale or sharing for cross-context behavioral advertising. They can also limit certain uses and disclosures of sensitive personal information and exercise their rights without unlawful discrimination.
Covered businesses must provide required privacy disclosures and comply with restrictions on collecting, using, and retaining personal information. The law does not apply to every business or every category of information.
Most CCPA violations do not create a right to file a private lawsuit under that law. The California Privacy Protection Agency and California Attorney General enforce most requirements. The CCPA provides a limited private right of action for specified security-related incidents, rather than a general right to sue over every privacy violation.
An attorney can evaluate whether the conduct supports another legal claim, an agency complaint, or another available response. A suspected violation alone does not establish eligibility for compensation or a class action.
Keep dated screenshots of privacy notices, consent screens, and opt-out settings, along with copies of requests and business responses. Record when the conduct occurred and which website, app, or business was involved. Preserve only information you are lawfully entitled to retain.
Legal sources: California Privacy Protection Agency: CCPA and CPRA FAQs and California Attorney General: Consumer Privacy Rights and Enforcement.
Concerned about how a business collects, uses, or shares your personal information? Matern Law Group can review your circumstances and explain your legal options.
California’s data privacy laws, including the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), give consumers important rights over how businesses collect, use, share, sell, and process their personal information.
Our firm represents consumers in high-impact, class-wide data privacy cases involving potentially unlawful data collection, tracking, sharing, recording, and other privacy practices by companies operating in California.
Data privacy cases can involve the ways companies collect, use, process, retain, track, or share consumers’ personal information as part of their business practices.
The cases we pursue typically involve company-wide practices such as:
These practices can affect large numbers of consumers and may implicate California privacy statutes, including the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), and other applicable privacy and consumer protection laws.
We are selective by design. The cases we pursue generally involve:
Our focus is on cases that can promote accountability and meaningful changes in how companies handle consumers’ personal information.
Our data privacy practice centers on California consumer privacy and protection laws, including:
These laws establish important rights concerning personal information and impose obligations on covered businesses regarding their data practices. Depending on the circumstances and applicable law, consumers may have options for addressing practices that violate their privacy rights.
Privacy concerns can arise when companies collect, track, share, sell, or record personal information in ways that violate applicable law. Examples may include:
These practices are not automatically unlawful. The information involved, technology used, disclosures provided, consent obtained, and applicable legal requirements all matter.
No. The California Privacy Rights Act (CPRA) amended the California Consumer Privacy Act (CCPA), but these laws do not provide a general private right to sue over improper collection, tracking, sharing, or failures to honor privacy requests.
Many CCPA violations are enforced by the California Privacy Protection Agency or the California Attorney General. Depending on the facts, the same conduct may also support a separate claim under another privacy or consumer protection law. An attorney must identify a valid legal basis for any private lawsuit.
The available remedies depend on the specific law and claim. A qualifying private lawsuit may seek compensation for legally recognized harm, an order stopping unlawful practices, or other relief authorized by the applicable statute.
Some privacy statutes authorize statutory damages when their specific requirements are met. These amounts are not automatic and should not be applied broadly to every privacy complaint. An attorney can evaluate whether a particular remedy is available.
Potentially. A company-wide tracking, sharing, or recording practice may affect many consumers in similar ways. A class action may be appropriate if there is a valid underlying claim and the case satisfies applicable class certification requirements.
Matern Law Group focuses on large-scale privacy matters involving common company practices. Similar experiences alone do not guarantee that a lawsuit can proceed as a class action.
Save materials that help explain the practice and your interaction with the company, including:
Preserve materials you may lawfully access. You do not need to investigate the company’s technology yourself before seeking legal advice.
Our attorneys can evaluate whether a company’s widespread data collection, tracking, sharing, or recording practices may support a claim under applicable California law. We assess the legal basis, available evidence, potential remedies, and whether the conduct is suitable for collective action.
If you believe a company’s widespread data collection, tracking, sharing, recording, or other privacy practices may have violated California law, we encourage you to reach out.
You deserve clear answers about your rights. Contact Matern Law Group to discuss your situation and explore your legal options.
Our Practices are Guided by Integrity. We’ll protect what you deserve.
We work tirelessly and fight tenaciously to hold rights abusers accountable.
If you’ve experienced a distressing incident related to an issue like this, call us for a free case evaluation.
Legal cases can be lengthy, complicated, and confusing, but you don’t have to take on the system all by yourself. If you believe someone has violated your individual rights, or the rights of a large group of people in your community, we can help you find the right course of action.
"*" indicates required fields