California Consumer Privacy Act (CCPA) Compliance
Protect your privacy. Stand up to CCPA violations and hold businesses accountable.
The Lyon Firm Is Investigating CCPA and CPRA Violations
In this digital era, your personal information is extremely valuable but more compromised than ever, as businesses everywhere collect it in ways we don’t fully understand. However, laws like the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) give consumers more control over their data, ensuring businesses are transparent about how they collect, use, and share it.
Yet, figuring out exactly what your rights and protections are under these laws can be overly technical and confusing. At The Lyon Firm, we have nearly two decades of experience helping people in complex legal matters, such as class action lawsuits, violations during credit card transactions, wiretapping, and data privacy issues like those covered under the CCPA and CPRA.
Our team is proud to have earned a reputation for handling intricate cases like these and protecting individuals from the carelessness and greed of large corporations.
If you have questions about the security of your personal information or if you believe your data has been compromised, reach out to The Lyon Firm online or by calling (513) 381-2333 today.
“I have nothing but positive things to say about this law firm and Mr. Lyon. I am the kinda person who has tons of questions, and they were amazing at answering them all. I am very grateful for all the hard work they have done and consider them a trusted resource at this point. If I could give 10 stars, I would!”
– Michael H. | Client
What Is the CCPA?
The California Consumer Privacy Act of 2018 (CCPA) gives consumers more control over their own personal information by limiting the kind of data that businesses collect about them. These regulations provide CCPA compliance guidance to companies and explain new privacy rights for California consumers, including:
- The right to know what personal information a business collects
- The right to know how collected data is used and shared
- The right to delete personal information that has already been collected
- The right to opt-out of the sale of personal information
- The right to non-discrimination for exercising these privacy rights
What Information Is Protected Under the CCPA?
Personal information is information that identifies, relates to, or could reasonably be linked with you or your household. This information can include the following:
- Name
- Social security number
- Email address
- Records of products purchased
- Internet browsing history
- Geolocation data
- Fingerprints
- DNA
Personal information does not include publicly available information, such as professional licenses and public real estate/property records.
CONTACT THE LYON FIRM TODAY
Please complete the form below for a FREE consultation.
ABOUT THE LYON FIRM
Joseph Lyon has 17 years of experience representing individuals in complex litigation matters. He has represented individuals in every state against many of the largest companies in the world.
The Firm focuses on single-event civil cases and class actions involving corporate neglect & fraud, toxic exposure, product defects & recalls, medical malpractice, and invasion of privacy.
NO COST UNLESS WE WIN
The Firm offers contingency fees, advancing all costs of the litigation, and accepting the full financial risk, allowing our clients full access to the legal system while reducing the financial stress while they focus on their healthcare and financial needs.
What Is CPRA?
In 2020, California voters passed Proposition 24, which brought in the California Privacy Rights Act (CPRA). The CPRA made key updates to the CCPA, strengthening privacy protections even further. These updates took effect on January 1, 2023, adding more rights for consumers, such as:
- Right to Correct Inaccurate Information: Consumers now have the right to request the correction of any inaccurate personal information that a business holds about them. This gives individuals more control over ensuring that the information companies have is up to date and accurate.
- Right to Limit the Use of Sensitive Personal Information: The CPRA adds a new layer of protection for sensitive personal data, such as health information, financial details, and precise geolocation. Consumers can now request that businesses limit how this sensitive information is used and shared, ensuring that it’s only used in ways necessary to provide requested goods or services.
- Expanded Right to Know: Under the CPRA, consumers not only have the right to know what personal information is being collected, but they now have the right to understand how long a business intends to retain that data. If a specific retention period isn’t available, businesses must disclose the criteria they use to determine how long they keep personal information.
- Cybersecurity Audits: The CPRA requires businesses to conduct regular risk assessments and cybersecurity audits for activities that pose significant risks to consumer privacy to ensure companies are actively evaluating and improving their data protection measures.
It’s important to note that the CPRA is an amendment to the CCPA, not a completely separate law. That’s why we often refer to it as “CCPA, as amended” to reflect these updates.
At this point, we’re all used to hearing about data breaches. It seems as if every day, there is some company in the news for being the victim of a cyberattack or another app exposed for taking our data without our knowledge, exposing thousands or even millions of personal records, making it feel like privacy violations are just a part of our reality.
Under the CCPA, you have real rights to control your data, protect your privacy, and hold businesses accountable. It’s time to stop letting data privacy violations slide. Speak out today by contacting a CCPA lawyer at The Lyon Firm online or by calling (513) 381-2333.
How Does CCPA Compliance Work?
The CPRA applies to businesses that meet specific thresholds, including:
- Companies with annual revenues over $25 million.
- Those that collect or share data from 100,000 or more California residents.
- Companies that make 50% or more of their revenue from selling personal data.
If a business falls under these criteria, it must comply with the CCPA and CPRA by implementing several key practices to protect consumer privacy:
- Responding to customer requests for what personal data the company has collected, requesting the business to delete or correct their personal data, and asking businesses to opt-out of the sale or sharing of their data.
- Sending customers a “notice at collection,” which must list the categories of personal information businesses collect about consumers and the purposes for which they use the categories of information.
- Implementing data security measures to avoid data breaches and misuse, businesses must take reasonable steps to secure the personal data they collect.
Importantly, businesses cannot discriminate against you for exercising these rights under the CCPA, and businesses cannot make you waive these rights. CCPA violations would include a business denying goods or services, charging you a different price, or providing a different level or quality of goods or services.
Consumers should ask themselves the following questions:
- Is a company’s data monitoring lawful, fair, and transparent?
- Is the company taking every reasonable step to erase or correct data that is inaccurate or incomplete?
- Does the company delete personal data once it no longer needs it?
- Is the data collected appropriately secured?
How Do I Know If I Can File a CCPA Lawsuit?
You can sue businesses under the CCPA if your first name (or first initial) and last name, in combination with any of the following, are compromised:
- Social security number
- Driver’s license number
- Tax identification number
- Passport number
- Military identification number
- Other unique identification numbers issued on a government document
- Financial account number
- Credit card number
- Debit card number with security code
- Medical or health insurance information
- Biometrics: Fingerprint, retina or iris image, or other unique biometric data
Data privacy is a very complicated area of law, and it’s easy to get tangled up in the web of technical and legal jargon. However, a lawyer can take the time to walk you through and break down everything so you’re not going in blind.
Plus, studies have shown that enlisting the help of a lawyer can greatly benefit your case, with over 90% of those with legal representation securing a settlement or award, compared to just 50% of those who went it alone.
According to CYTRIO research, only 11% of companies are fully compliant with CCPA requirements, particularly when it comes to managing Data Subject Access Requests (DSARs).
Who Enforces CCPA And CPRA?
One of the most significant changes brought by the CPRA is the establishment of the California Privacy Protection Agency (CPPA). This agency is now responsible for enforcing both these data privacy laws, providing clearer oversight, and ensuring that businesses follow CPRA compliance.
Why Hire The Lyon Firm to Defend Your Data Privacy
Identity theft, fraud, and financial loss are just the start of what can happen when your personal information is compromised. You don’t have to accept things the way they are.
Our firm strongly believes that consumers should never be made to feel insignificant or pressured into disregarding their rights just because businesses believe they can get away with it. It is these ideals that have driven us to stand up against those who violate data privacy laws, recovering millions for clients, including:
- $12,500,000: Co-lead class counsel in a data breach case against Health Aide of Ohio, involving 141,149 medical patients, securing a nationwide settlement that provided monetary compensation and identity theft protection for the affected class.
- $9,250,000: Co-lead class counsel in a TCPA (Telephone Consumer Protection Act) class action against Navy Federal Credit Union, securing final approval for a nationwide settlement providing monetary compensation to a class of over 66,000 people. The TCPA restricts unsolicited marketing calls, prerecorded messages, and robocalls, ensuring consumers’ privacy is protected from intrusive communications.
For 19 years, The Lyon Firm has made it our goal to ensure that the data privacy and rights of people are not trampled on by large corporations simply because they have resources and wealth. Your privacy matters, and your rights deserve to be respected, no matter how big the company you’re up against. Contact us today online or by calling (513) 381-2333.

Reviewing CCPA Consumer Rights
Why Are the CCPA and CPRA Important?
Without personal data privacy violation class actions, large corporate defendants would be able to cause small amounts of harm to a large group of individuals without any risk of monetary penalty. By holding companies accountable for safely storing your personal information, every consumer will have more control over how their data is used in the future. Let’s fight for California consumer rights.
CONTACT THE LYON FIRM TODAY
CCPA Data Privacy Lawsuit FAQ
CCPA violations can occur when businesses fail to comply with the rights and protections outlined in the law. For example, companies may violate the CCPA by not maintaining an updated privacy policy, failing to respond to consumer requests, or selling personal information without giving consumers the option to opt-out. Additionally, businesses that discriminate against consumers for exercising their privacy rights are also in violation of the law.
Companies that violate the CCPA can face substantial fines, with penalties reaching up to $2,500 for each unintentional violation and $7,500 for intentional violations, which can quickly add up for multiple violations. In cases of data breaches, consumers can seek damages of $100 to $750 per violation.
A class action lawsuit allows one person to file a case on behalf of many others who have been affected in the same way. If a company violates the privacy rights of a large number of people under the CCPA, like failing to protect personal information or not honoring privacy requests, a class action can help hold them accountable. It’s a way for individuals to band together and take on big corporations that might otherwise ignore the harm they’ve caused.
An attorney can help you unravel the complex regulations surrounding your personal data and privacy rights. They can assist you in submitting Data Subject Access Requests (DSARs) to businesses to obtain or delete your personal information. If a business fails to comply with the CCPA, a lawyer can help you take legal action, including filing a lawsuit for damages in the event of a data breach or unlawful data practices. Also, they can help you understand your eligibility to join class action lawsuits.
Learn About the Legal Process
Filing Class Action lawsuits is a complex and serious legal course and can carry monetary sanctions if proper legal course is not followed. The Lyon Firm is dedicated to assisting plaintiffs work toward a financial solution to assist in compensating for damages sustained.
We work with law firms across the country to provide the most resources possible and to build your case into a valuable settlement. The current legal environment is favorable for consumers involved in data privacy class actions, deceptive marketing lawsuits, TCPA telemarketing claims, and financial negligence claims.
Class Action Information Center
-
-
Answer a few general questions.
-
A member of our legal team will review your case.
-
We will determine, together with you, what makes sense for the next step for you and your family to take.
-