"Cosmetics Giant Sephora to Pay $1m+ Privacy Settlement"

One of the world’s biggest cosmetics retailers, Sephora, has agreed to pay $1.2 million in penalties and take corrective action after falling foul of the California Consumer Privacy Act (CCPA).  Sephora was accused of failing to disclose to consumers that it was selling their personal information and failing to process user requests to opt out of this sale via user-enabled global privacy controls.  The firm did not correct these issues within the 30-day period stipulated by the CCPA.  As part of the settlement, Sephora has agreed to: clarify its privacy policy to state that it sells data, provide a way for consumers to opt out of the sale of personal information, tweak its service provider agreements to meet the CCPA’s requirements, and provide reports to the attorney general relating to its sale of personal information and the status of its service provider relationships.
 

Infosecurity reports: "Cosmetics Giant Sephora to Pay $1m+ Privacy Settlement"