On July 1, the California Attorney General proposed a final judgment and permanent injunction to resolve allegations under the California Consumer Privacy Act (CCPA) concerning a company’s alleged mishandling of consumers’ personal and sensitive information for advertising purposes. The proposed order would require the company to pay $1,550,000.

The proposed order would prohibit the company from sharing personal information revealing that a consumer viewed an article or webpage related to a specific medical condition. The company must also provide required notice and offer consumers the right to limit disclosure of their personal information for advertising purposes and would be barred from disclosing personal information unless it posts a “Notice of Right to Limit” as required by the CCPA. For three years, the company must implement certain programs to monitor compliance regarding opt-out requests, as well as review third-party and service provider relationships regarding online tracking technologies on an annual basis.