ARTICLE
1 April 2026

CalPrivacy Enters Settlement With Ford Over Alleged "Unnecessary Friction" In Consumer Privacy Opt-Out Process

D
Dechert

Contributor

Dechert is a global law firm that advises asset managers, financial institutions and corporations on issues critical to managing their business and their capital – from high-stakes litigation to complex transactions and regulatory matters. We answer questions that seem unsolvable, develop deal structures that are new to the market and protect clients' rights in extreme situations. Our nearly 1,000 lawyers across 19 offices globally focus on the financial services, private equity, private credit, real estate, life sciences and technology sectors.
On March 5, 2026, the California Privacy Protection Agency ("CalPrivacy") announced a settlement ("Settlement") with Ford Motor Co. ("Ford"). The California Consumer Privacy Act ("CCPA") gives consumers...
United States California Consumer Protection
Dechert are most popular:
  • within Real Estate and Construction and Strategy topic(s)

On March 5, 2026, the California Privacy Protection Agency ("CalPrivacy") announced a settlement ("Settlement") with Ford Motor Co. ("Ford"). The California Consumer Privacy Act ("CCPA") gives consumers the right to opt out of businesses' sharing their personal information. CalPrivacy alleged that Ford violated the CCPA by requiring consumers to verify their identities before processing their opt-out requests and not processing requests submitted by consumers who failed to complete the email verification step. According to CalPrivacy, Ford's opt-out practices created "unnecessary friction" for consumers seeking to exercise their right to opt out of the sale and sharing of their personal information under CCPA.

As part of the Settlement, Ford agreed to pay a fine of $375,503, change its practices to provide consumers with an "easy" opt-out method that requires "minimal steps," and audit the tracking technologies deployed on its website to maintain compliance with opt-out preference signals. Under the Settlement, Ford does not acknowledge wrongdoing.

The settlement follows an investigation by CalPrivacy's Enforcement Division, conducted with Ford's cooperation, into the company's privacy practices and its compliance with the CCPA. The investigation was part of a broader inquiry into vehicle manufacturers' privacy practices, similar to CalPrivacy's enforcement action against American Honda Motor Co. (see prior discussion in Cyber Bits Issue 73), and comes against the backdrop of CalPrivacy's ongoing "investigative sweep" in partnership with regulators in Colorado and Connecticut.

Takeaway: CalPrivacy's settlement with Ford shows that the agency is serious about compliance with the technical requirements of the CCPA and continues to be focused on opt-outs and the ease of exercising consumer rights. Companies should take a close look at all elements of their CCPA compliance programs and opt out processes to make sure they meet the requirements to a "T," as general efforts that are not carefully tailored to regulatory requirements and consumer ease may not be accepted.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

[View Source]

Mondaq uses cookies on this website. By using our website you agree to our use of cookies as set out in our Privacy Policy.

Learn More