What is the real scope of the private right of action under CCPA?
“While many commentators have analyzed the CCPA’s express private right of action for data breaches that occur in the absence of reasonable security measures, it’s important to note that class litigation may be used in an attempt to privately enforce the other aspects of the law.”
“[C]ertain members of the plaintiffs’ bar have publicly disclosed that they may attempt to assert class-action claims notwithstanding the CCPA’s efforts to limit new private rights of action. While these attempts… may ultimately fail based on a… reading of the CCPA and legislative intent, as well as other obstacles, the risk remains that some companies will find themselves forced to defend claims testing the law’s outer bounds until the courts have a chance to weigh in on how the law should be applied and interpreted”
Details from the International Association of Privacy Professionals.