In the first three years of its existence, 320 lawsuits have been filed in 28 states attempting to enforce provisions of the California Consumer Privacy Act (CCPA), according to an analysis of those actions by law firm Akin, which found that more than one in three 2022 lawsuits targeted financial services companies.
Akin’s third annual report on CCPA civil lawsuits and administrative actions also found:
- More than 80% of CCPA lawsuits in 2022 corresponded to a breach notice filed with the California Attorney General’s Office, and businesses that report a data breach to the AG’s office have about a 15% of facing subsequent consumer litigation.
- Breaches affecting at least 100,000 people accounted for 56% of lawsuits in 2022 stemming from data breaches.
- Financial services companies accounted for 34% of cases in 2022, by far the highest rate of any industry. Medical services and software/technology each comprised 13%.
