Per Violation
Damages under the CCPA are based on per instance or per capita violation. That means that the number of persons the violations were directed at will be the multiplier for damages calculations.
Intentional Violation
Intentional damages carry a higher cap of $7500 per instance.
Private Right of Action
Consumers may also bring a private lawsuit against your company for failure to maintain adequate security for protection of their personal information under the new law. Damages will be recoverable if their recovery exceeds the statutory damages against your company. The private right of action may also be brought by multiple consumers as a class action of those affected.