California AG focuses on contracts, opt-outs, and consumer disclosures in Healthline settlement

Aaron J. Burstein, Meaghan M. Donahue On July 1, 2025, California Attorney General Rob Bonta announced a $1.55 million proposed settlement order with Healthline Media – the largest California Consumer Privacy Act (CCPA) settlement to date. The proposed settlement resolves allegations that Healthline violated the CCPA by 1) failing to honor consumer requests to opt-out of the sale and sharing of personal information, 2) violating the CCPA’s purpose limitation principle, and 3) failing to include required data protection provisions in contracts with service providers and third parties.