Does It Have An Attorney’s Fees Clause?—Not An Express One, But It Does Have A Catchall Which Will Be The Subject Of Judicial Interpretation.
On January 1, 2020, the California Consumer Privacy Act of 2018 (CCPA) becomes law. It is a wide-ranging law that impacts more than 500,000 U.S. companies doing business with California residents. It provides California residents with a panoply of rights as to their personal information. Among other things, the CCPA provides that a California resident may bring a private right of action under the CCPA against an impacted business for failure to implement and maintain reasonable security procedures/practices appropriate to the nature of the information resulting in an unauthorized access, exfiltration, theft, or disclosure of unencrypted or nonredacted personal information—with a recent amendment clarifying that this private right of action only applies to data breaches and no other CCPA violations.
However, despite the private right of action granted to California residents, the law does not include an express provision allowing prevailing plaintiffs to recovery their attorney’s fees, although it does include catchall language allowing the court to award “[a]ny other relief the court deems proper.” So, that broad language will be the subject to court interpretation, although we could see cases where successful plaintiffs request fees under California’s private attorney general statute—especially in class action cases.
Interestingly enough, a study commissioned by California’s Attorney General estimates that “initial compliance” with the CCPA may, for its part, cost the estimated 500,000 affected American firms about $55 billion, as summarized in an article in the December 21, 2019 issue of The Economist. Stayed tuned for developments in the attorney’s fees area.