Although the California Consumer Privacy Act has been in effect since January, there is still no clarity on how judges will rule in some of the class action lawsuits over third-party cookies collecting data and what constitutes a reasonable effort to protect personally identifiable information.

Since going into effect in January, the CCPA only provides a private right of action for consumers relating to access to sensitive personal information during a data breach. If a court finds in the plaintiffs’ favor, a company can be liable for $100 to $750 per violation of the statute.