The California Consumer Privacy Act clears the way for state residents to sue companies for data breaches involving certain information, if a company fails to maintain reasonable security. Californians can seek damages of between $100 and $750 per consumer per incident under the law. That may mean millions of dollars for some companies, attorneys said.
The new, limited CCPA private right of action and possibility of statutory damages increase companies’ potential exposure to lawsuits in California, trial and privacy attorneys said. The attorneys said they expect a flood of litigation after the law takes effect on Jan. 1, 2020.
via California Privacy Law May Spur Data Breach Lawsuit Wave.