California’s AG says Sephora will pay $1.2M after failing to tell customers that it was selling their data, marking the start of CCPA privacy law enforcement (David Ingram/NBC News)

David Ingram / NBC News:
California’s AG says Sephora will pay $1.2M after failing to tell customers that it was selling their data, marking the start of CCPA privacy law enforcement  —  SAN FRANCISCO — California has its first significant settlement under the state’s sweeping online privacy law, and it’s not with a tech company.