Skip to content
California AG Bonta Secures Settlements with Lyft, Sephora, and DoorDash Over Privacy Violations

California AG Bonta Secures Settlements with Lyft, Sephora, and DoorDash Over Privacy Violations

First seen 30 Oct 2026, 16:53 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 30, 2026 at 19:16 UTC
  • •Lyft, Sephora, and DoorDash settled for violating CCPA, totaling $1.8 million in penalties.
  • •Settlements require companies to implement opt-out options for consumers regarding personal data sales.
  • •California AG Bonta's actions represent a significant enforcement effort under the CCPA.

California Attorney General Rob Bonta announced settlements with Lyft, Sephora, and DoorDash for violating the California Consumer Privacy Act (CCPA). Lyft will pay $1.8 million for failing to provide an opt-out option for the sale of personal information. Sephora's settlement addresses its failure to disclose the sale of personal data and process opt-out requests via global privacy controls. DoorDash is penalized for selling customer data without notice or opt-out opportunities, particularly through a marketing cooperative. These actions reflect ongoing enforcement of California's privacy laws, with Bonta emphasizing the importance of consumer rights and compliance by businesses.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-29
Lyft settlement announced
Lyft agrees to a $1.8 million settlement for failing to provide an opt-out option for personal information sales.
Pogowasright
2026-10-30
Sephora settlement announced
Sephora resolves allegations of failing to disclose personal data sales and process opt-out requests.
oag.ca.gov
2026-10-30
DoorDash settlement announced
DoorDash settles for selling customer data without proper notice or opt-out opportunities.
oag.ca.gov

More articles in this cluster (3)

Following this threat?

Track Disney in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (10)

1 / 2

Common questions

What are the penalties for each company?
Lyft will pay $1.8 million; Sephora and DoorDash settlements details are not disclosed.
What changes must these companies implement?
They must provide clear opt-out options for consumers regarding the sale of personal information.
How does this affect consumers?
Consumers will have better control over their personal data and the ability to opt out of its sale.