The California Consumer Privacy Act (CCPA) had a busy year in 2022. Whether it be with unprecedented enforcement actions, expansion of the types of data covered and new draft provisions, the oldest state data privacy law in the country brought some clarity, and many new questions, to companies dealing with California residents’ data.

Interestingly, 2022 also saw the number of CCPA cases drop significantly compared to years prior—but data privacy lawyers warn that consumer-driven CCPA litigation is far from cooling down.