2022 CCPA Litigation and Enforcement Report
Our annual CCPA Litigation and Enforcement Report looks back at the third year of civil litigation and administrative enforcement related to the California Consumer Privacy Act (CCPA) and distilling salient points from more than 300 actions into key takeaways for businesses to evaluate and mitigate risks. The report also previews emerging trends in U.S. consumer litigation and regulatory enforcement in 2023.
Key findings include:
- More than 80% of CCPA suits brought in 2022 corresponded to a breach notice filed with the California attorney general (AG). Businesses that report a data breach to the AG have about a 15% chance of subsequently facing consumer litigation.
- Large data breaches were the source of the majority of the CCPA lawsuits, with more than half of the CCPA actions initiated in 2022 stemming from data breaches allegedly impacting the personal information of 100,000 or more people.
- For the third year in a row, businesses in the financial services industry are the most likely to face a CCPA claim, with one-third of all CCPA claims initiated in 2022 targeting the industry.
© 2024 Akin Gump Strauss Hauer & Feld LLP. All rights reserved. Attorney advertising. This document is distributed for informational use only; it does not constitute legal advice and should not be used as such. Prior results do not guarantee a similar outcome. Akin is the practicing name of Akin Gump LLP, a New York limited liability partnership authorized and regulated by the Solicitors Regulation Authority under number 267321. A list of the partners is available for inspection at Eighth Floor, Ten Bishops Square, London E1 6EG. For more information about Akin Gump LLP, Akin Gump Strauss Hauer & Feld LLP and other associated entities under which the Akin Gump network operates worldwide, please see our Legal Notices page.