More marketers are taking notice of California’s data privacy laws after the state said last month that cosmetics retailer Sephora had agreed to pay $1.2 million in penalties for alleged violations related to its targeted advertising practices. Some companies that have received letters have complied or begun working toward compliance, while others remain under investigation, the spokesperson said. Many companies delayed compliance because they disagree with that definition and don’t want to tell consumers that they sell data, he said. The state’s determination that Sephora didn’t process global opt-out requests played a key role in the attorney general’s decision to take action. “People see a headline about Sephora and everyone thinks they sold data,” she said.

---