DoorDash, Inc., $375,000
First public enforcement action targeting a company’s participation in a marketing co-operative. DoorDash sold personal information via a marketing exchange without notifying consumers or providing an opt-out.
Case identifiers
- Respondent
- DoorDash, Inc.
- Agency
- California Attorney General
- Announced
- 2024-02-21
- Monetary relief
- $375,000
- Case number
- California AG Case (2024)
- Statutes cited
- California Consumer Privacy Act (CCPA) · California Online Privacy Protection Act (CalOPPA)
Key facts
- 1
DoorDash disclosed names, addresses, and transaction data of California customers to a marketing co-op in exchange for targeted advertising to customers of other co-op members.
- 2
California AG characterized the exchange as a "sale" under the CCPA.
- 3
Consumers were not told the exchange existed and had no mechanism to opt out.
- 4
First CCPA enforcement targeting marketing co-operative data sales, significant precedent.
Primary sources
Read the original government documents. These are the authoritative records, everything on this page is derived from them.
- California Attorney General press releasehttps://oag.ca.gov/news/press-releases/attorney-general-bonta-secures-settlement-doordash-violating-californians
Generate requests in under 60 seconds
Generate a deletion request for $9
Where this action sits in the tracker
- It is one of 4 state-AG actions among the 26 cases in this tracker.
- Of the 19 tracked actions with monetary relief, $375,000 ranks number 18 by amount.
- 6 tracked actions were announced in 2024.
- It is one of 7 tracked data-broker actions.
FAQ
What did the state-AG charge DoorDash, Inc. with?+
First public enforcement action targeting a company’s participation in a marketing co-operative. DoorDash sold personal information via a marketing exchange without notifying consumers or providing an opt-out. The California Attorney General cited California Consumer Privacy Act (CCPA), California Online Privacy Protection Act (CalOPPA).
How much did DoorDash, Inc. pay?+
DoorDash, Inc. had monetary relief of $375,000, announced on 2024-02-21. The settlement also imposed injunctive terms (see below).
Does the DoorDash, Inc. settlement mean my data has been deleted?+
No, the order does not automatically delete your data. You retain any rights available under applicable state privacy law (CCPA, CPA, TDPSA, VCDPA, and others) to submit your own deletion request. OfflistMe can generate a user-reviewed request draft pre-addressed to the respondent’s privacy contact.
How can I read the original state-AG order?+
The California Attorney General press release is available at https://oag.ca.gov/news/press-releases/attorney-general-bonta-secures-settlement-doordash-violating-californians. The case / matter number is California AG Case (2024).