Real case · checked 19 October 2026
A cookie opt-out that failed for 40 days cost a clothing retailer $345,178.
California's privacy agency fined Todd Snyder in 2025. Its head of enforcement said a consent management platform doesn't get a business off the hook.
The short version
California's privacy agency fined Todd Snyder after its opt-out tool failed for 40 days. It also asked for too much information to opt out.
The agency's enforcement head said using a consent management platform "doesn't get you off the hook for compliance."
If your agency installs cookie banners for clients, test the opt-out after every site change.
Sources
Checked on 19 October 2026.
"resulting in a failure to process consumer requests to opt out of the sale or sharing of personal information for 40 days"
California Privacy Protection Agency press release. Published 6 May 2025. "Requiring consumers to submit more information than necessary to process their privacy requests"
CPPA press release. Same release. "Using a consent management platform doesn't get you off the hook for compliance."
CPPA press release, Michael Macko, head of the Agency's Enforcement Division. Same release.
Todd Snyder agreed to pay the fine to resolve the allegations. The Board's order is dated 1 May 2025. The agency now calls itself CalPrivacy.
Watch
Psst posts every video on these channels.
Psst is made by Zain Ali, who founded ivector, a software company.