Privacy Rights Can’t Be Left in the Rearview: Attorney General Bonta Secures $1.8 Million Settlement with Lyft

Pogowasright •Dissent • October 29, 2026

California Attorney General Rob Bonta today announced a settlement with Lyft , resolving allegations that the company violated the California Consumer Privacy Act (CCPA) and California’s Unfair Competition Law by failing to offer consumers the ability to opt out of the sale of their personal information within Lyft’s mobile app. The settlement includes $1.8 million in civil penalties and requires Lyft to provide an in-app opt-out option and notify California consumers of their right to not have their personal information sold.

In addition to $1.8 million in civil penalties, the settlement requires Lyft to provide an in-app opt-out option and notify California consumers of their right to not have their personal information sold.

California Consumer Privacy Act

Attorney General Bonta is committed to the robust enforcement of California’s nation-leading privacy law. Today’s settlement represents the California Department of Justice’s ninth enforcement action under the CCPA. Attorney General Bonta has also announced settlements with General Motors , Sephora , DoorDash , and Disney as well as mobile app gaming company, Jam City ; streaming service, Sling TV ; website publisher, Healthline.com ; and entertainment company, Tilting Point Media .

For more information the CCPA, visit oag.ca.gov/ccpa . To report a violation of the CCPA to the Attorney General, consumers can submit a complaint online at oag.ca.gov/report .

Stop, DROP, and Secure Your Data

Californians can now send one request to more than 575 registered data brokers to delete their personal data using a new, easy-to-use online tool. The Delete Request and Opt-out Platform (DROP), developed by CalPrivacy, gives Californians more control over their personal information and helps limit the information that data brokers sell. Formore information DROP and how Californians can submit a deletion request, visit: privacy.ca.gov/drop .

Source: California Attorney General Rob Bonta

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

California AG Bonta Secures Settlements with Lyft, Sephora, and DoorDash Over Privacy Violations California Attorney General Rob Bonta announced settlements with Lyft, Sephora, and DoorDash for violating the California Consumer Privacy Act (CCPA). Lyft will pay $1.8 million for failing to provide an opt-out option for the sale of personal information. Sephora's settlement addresses its failure to disclose the sale of personal data and process opt-out requests via global privacy controls. DoorDash is penalized for selling customer data without notice or opt-out opportunities, particularly through a marketing cooperative. These actions reflect ongoing enforcement of California's privacy laws, with Bonta emphasizing the importance of consumer rights and compliance by businesses. 1 sources 31

Extracted Entities

Companies (8)

Disney Doordash General Motors Healthline.com Jam City Sephora Sling TV Tilting Point Media

Platforms (2)

DROP Lyft