@filtro ha detto in Multa per non aver rispettato la CCPA a Sephora:
per aver permesso a terze parti di creare un profilo degli utenti
In altre parole: per aver fatto remarketing.
Anche se il problema starebbe nella non corretta informazione:
According to the attorney general's office, Sephora's violation specifically concerned the failures to inform individuals about the sale of their data
In particolar modo, mi pare di capire che non abbiano rispettato l'opt-out:
"Technologies like the Global Privacy Control are a game changer for consumers looking to exercise their data privacy rights. But these rights are meaningless if businesses hide how they are using their customer's data and ignore requests to opt-out of its sale," Bonta said in the wake of the first action.
Qua l'estratto a cui si fa riferimento: https://oag.ca.gov/privacy/ccpa/enforcement
Online Retailers Implemented Opt Out Procedures, Including GPC
Industry: Consumer Retail
Issue: Failure to honor consumer opt outs of sales
n an enforcement sweep, multiple online retailers were found to be using web tracking technologies to make consumers’ personal information available to third parties in exchange for services like advertising or analytics, without offering an opt-out mechanism or ensuring the third party was a CCPA-compliant service provider. Specifically, these retailers did not process a consumer’s request to opt-out via a user-enabled global privacy control, as required by the CCPA regulations. After being notified of alleged noncompliance, these businesses reviewed and updated service-provider contracts, implemented technology to communicate a “restricted use” signal to third-party recipients of personal information, and blocked some transfers of personal information upon detection of the Global Privacy Control (GPC)..
