[xmodem]

I would hope the state of California would care. I have no idea how you're meant to try to enforce your rights under CCPA other than by hiring a lawyer.

I filed a complaint with my local data protection authority a couple of years back. We had to integrate a credit reporting API and I noticed that it required no authentication other than a username. I also observed that who was preforming the check was a field we could specify in the request and it was not validated (I did a check on myself with the SoapUI default of '?'). I did not receive a response. So unfortunately I think our options for actually enforcing our rights are probably limited.

Still, I guess we'll find out if Clearview takes GDPR any more seriously than CCPA.