Sephora agreed to pay $1,2 million in penalties and comply with requirements such as providing mechanisms for consumers to opt-out of the sale of personal information, according to the settlement announced by California Attorney General Rob Bonta.
"Consumers seeking to exercise their data privacy rights will benefit greatly from technologies such as the Global Privacy Control. These rights, however, are meaningless if businesses conceal how they use their customers' data and ignore requests to opt out of its sale "According to Rob Bonta.
"I hope that today's settlement sends a strong message to businesses that continue to violate California's consumer privacy law. My office is keeping an eye on you, and we will hold you accountable "Bonta forewarned.
He pointed out that consumers are constantly being tracked online, and that many vendors allow third-party companies to install tracking software on their websites and apps. Third parties can then monitor various types of data.
Third parties, for example, could see whether a consumer is using a MacBook or a Dell, whether they are taking prenatal vitamins, which eyeliner brand they prefer, and even their exact location in Sephora's case.
General Bonta also sent notices to a number of businesses today, alleging noncompliance with their failure to process consumer opt-out requests made through user-enabled global privacy controls. Companies that received letters today have 30 days to correct any alleged violations.
Copyright © 2025