In only the second public enforcement action for CCPA violations since the law took effect in 2020, the California AG settled with DoorDash recently, sending clear messages to companies around compliance with the CCPA and the California Online Privacy Protection Act, and signaling future enforcement positions. In this guest article, Ballard Spahr partner Gregory Szewczyk and associate Kelsey Fayer examine key implications of the DoorDash action and offer compliance lessons to help companies stay out of enforcement crosshairs. See “Lessons From California’s First CCPA Enforcement Action” (Sep. 28, 2022).