The Office of the Attorney General ('OAG') updated, on 24 August 2022, its list of 13 enforcement case examples related to the California Consumer Privacy Act of 2018 (last amended in 2019) ('CCPA'). In particular, the OAG outlined that it does not generally release information about its investigations, but that the published examples illustrate situations in which the OAG sent a notice of alleged non-compliance and steps were taken by each company in response. Furthermore, the OAG noted that the examples include an online advertising business whose privacy disclosures were not understandable to the average consumer, a data broker whose 'Do Not Sell My Personal Information' link worked only in certain browsers, and an enforcement sweep of businesses operating loyalty programmes offering financial incentives in exchange for personal information without providing a notice of financial incentive.

You can read the examples here.