---
title: "CCPA: Attorney General Sets Sights on Customer Loyalty Programs"
description: Enforcement of the CCPA continues, with the California Attorney General paying special attention to customer loyalty and rewards programs.
image: https://safe.truevault.com/hubfs/loyalty-program.jpg
---
- [CCPA](https://safe.truevault.com/learn/ccpa/what-is-the-ccpa)
- [GDPR Compliance](https://safe.truevault.com/gdpr-guide)
- [HIPAA](https://safe.truevault.com/learn/hipaa)
- [HIPAA Compliance](https://safe.truevault.com/blog/hipaa-compliance-checklist-download.html)
- [Personally Identifiable Information](https://safe.truevault.com/blog/what-is-pii)
- [PHI](https://safe.truevault.com/protected-health-information)
- [Resources](https://safe.truevault.com/learn/)
- Login
[TrueVault Safe Log in to TrueVault Safe](https://console.truevault.com) [TrueVault Polaris Log in to TrueVault Polaris](https://polaris.truevault.com)
- [Resources](https://safe.truevault.com/learn/)
- Login
- Login
- [TrueVault Safe Log in to TrueVault Safe](https://console.truevault.com)
- [TrueVault Polaris Log in to TrueVault Polaris](https://polaris.truevault.com)
[Blog](https://safe.truevault.com/blog)
- [Home](https://www.truevault.com/index.html)
- [Blog](https://safe.truevault.com/blog)
# CCPA: Attorney General Sets Sights on Customer Loyalty Programs
By Phillip Walters/ Published on February 4, 2022
In a recent [press release](https://oag.ca.gov/news/press-releases/data-privacy-day-attorney-general-bonta-puts-businesses-operating-loyalty), California Attorney General Rob Bonta made it clear that customer loyalty programs are an enforcement priority for California Consumer Privacy Act (CCPA) compliance. His office sent out 30-day cure notices to a number of “major corporations in the retail, home improvement, travel, and food services industries.” Companies that fix any alleged violations of the data privacy law within that time period will face no further penalties.
The CCPA requires that any business which offers financial incentives in return for consumer data (i.e., rewards or loyalty programs) must first make certain disclosures. These disclosures must describe the “material terms” of the program, including what kinds of personal data the business is collecting and how the incentive is related to the value of that information.
The Attorney General did not specify what these companies may have been doing wrong. It could range from not providing any disclosures at all to not providing an estimate of the value of consumers’ personal information. One interesting takeaway is that it is not just online businesses that are being targeted for enforcement, but stores with physical locations as well. “We may not always realize it, but these brick-and-mortar stores are collecting our data—and they’re finding new ways to profit from it,” said Bonta.
This is part of a trend of aggressive interpretation and enforcement of the CCPA, something that is expected to continue. Starting in 2023, the state will no longer be required to give businesses 30 days to fix any alleged noncompliance, and can instead proceed directly to administrative proceedings and fines. The newly created [California Privacy Protection Agency](https://safe.truevault.com/learn/ccpa/the-california-privacy-protection-agency) is also gearing up to take over CCPA enforcement from the Attorney General’s Office. Once that happens, enforcement actions are widely expected to take a big jump.
## Get Help With TrueVault Polaris
Customer loyalty programs are just one of many aspects of CCPA compliance that are easily overlooked by businesses whose attention is focused elsewhere. Even as enforcement ramps up, however, small and medium sized businesses keep delaying compliance. Often this is because of concerns over cost and lost time. [TrueVault Polaris](https://safe.truevault.com/) can help these businesses get compliant in as little as a few hours, and at a fraction of the cost of hiring an attorney or consultant. Designed by privacy attorneys, Polaris lets you handle your own CCPA compliance through a guided software experience, similar to filing taxes online.
To schedule a demo of how Polaris works, contact us today.
[](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/4693513/949d85da-b649-4822-b380-0922b22c3b60)
### Latest Posts
## [Should Utah's Privacy Law Be on Your Radar?](https://safe.truevault.com/blog/utah-privacy-law-does-it-apply)
Phillip Walters / November 17, 2022
## [Connecticut’s Privacy Law: Does It Apply to Your Business?](https://safe.truevault.com/blog/connecticut-privacy-law-does-it-apply)
Phillip Walters / November 10, 2022
## [Global Privacy Control: A New Requirement for Compliance](https://safe.truevault.com/blog/global-privacy-control)
Phillip Walters / November 7, 2022
## [A Cookie Banner Isn't Enough for CCPA Compliance](https://safe.truevault.com/blog/a-cookie-banner-isnt-enough)
Phillip Walters / October 27, 2022
## [Why CCPA Compliance Matters to HR](https://safe.truevault.com/blog/why-ccpa-matters-to-hr)
Phillip Walters / October 21, 2022
### Mailing List
### Company
- [Blog](https://safe.truevault.com/blog)
- [Contact Us](https://safe.truevault.com/contact-us-2019)
- [Careers](https://truevault.workable.com)
- [HIPAA Compliance Checklist](https://safe.truevault.com/blog/hipaa-compliance-checklist-download.html)
- [PDF: Developers Guide to HIPAA compliance](https://my.leadpages.net/leadbox/14472b173f72a2%3A131fd12f8b46dc/5760820306771968/)
### Developers
- [Patterns](https://safe.truevault.com/patterns)
- [Documentation](https://docs.truevault.com/)
- [Quick Start Guide](https://safe.truevault.com/quick-start-guide)
- [Secure Infrastructure](https://safe.truevault.com/secure-infrastructure)
- [API Overview](https://safe.truevault.com/api-overview)
### Latest Posts
### Contact Us
201 Mission Street, 12th Floor
San Francisco, CA 94105
Email: [hello@truevault.com](mailto:hello@truevault.com)
2024 © All Rights Reserved. [Privacy Policy](https://privacy.truevault.com/privacy-policy) | [Terms of Use](https://www.truevault.com/legal/truevault-terms-of-use) | [Supplemental Terms](https://www.truevault.com/legal/truevault-supplemental-terms-of-use) | [California Privacy Notice](https://privacy.truevault.com/privacy-policy#california-privacy-notice)