Re: I have but one question
The article says:
It's worth noting, however, that the California Privacy Rights Act (CPRA), which expands the CCPA and goes into effect in January 2023, also mandates companies not "share" folks' personal information with third parties.
so it is probably not yet illegal to share data without selling it in California but will be start of next year.
The regulatory capture in California (and the rest of the US) must be going pretty strong if it is really significant that the AG is going after a company in a case he seems willing to settle instead of actually creating a legal precedent.
Biting the hand that feeds IT
