For businesses that collect, process, and explore innovative uses of personal information, last month marked a watershed moment in the ongoing evolution of the U.S. regulatory landscape. Cracking down on the cosmetics brand Sephora, California’s attorney general announced the first enforcement settlement under the new wave of comprehensive state privacy laws that began with the California Consumer Privacy Act (CCPA) and continues with a number of new laws set to take effect across the country in 2023.
