DoorDash, Inc., $375,000
First public enforcement action targeting a company’s participation in a marketing co-operative. DoorDash sold personal information via a marketing exchange without notifying consumers or providing an opt-out.
Case identifiers
- Respondent
- DoorDash, Inc.
- Agency
- California Attorney General
- Announced
- 2024-02-21
- Monetary relief
- $375,000
- Case number
- California AG Case (2024)
- Statutes cited
- California Consumer Privacy Act (CCPA) · California Online Privacy Protection Act (CalOPPA)
Key facts
- 1
DoorDash disclosed names, addresses, and transaction data of California customers to a marketing co-op in exchange for targeted advertising to customers of other co-op members.
- 2
California AG characterized the exchange as a "sale" under the CCPA.
- 3
Consumers were not told the exchange existed and had no mechanism to opt out.
- 4
First CCPA enforcement targeting marketing co-operative data sales, significant precedent.
Primary sources
Read the original government documents. These are the authoritative records, everything on this page is derived from them.
- California Attorney General press releasehttps://oag.ca.gov/news/press-releases/attorney-general-bonta-secures-settlement-doordash-violating-californians
Exercise your rights now
Generate a deletion request for $5
The state-AG order binds DoorDash, Inc.'s future practices, but doesn't automatically delete your existing data. State privacy law (CCPA, CPA, TDPSA, VCDPA) gives you that right. OfflistMe generates a compliant deletion email pre-addressed to DoorDash, Inc.'s registered privacy contact.
Start for $5 →FAQ
What did the state-AG charge DoorDash, Inc. with?+
First public enforcement action targeting a company’s participation in a marketing co-operative. DoorDash sold personal information via a marketing exchange without notifying consumers or providing an opt-out. The California Attorney General cited California Consumer Privacy Act (CCPA), California Online Privacy Protection Act (CalOPPA).
How much did DoorDash, Inc. pay?+
DoorDash, Inc. paid $375,000 in monetary relief, announced on 2024-02-21. The settlement also imposed injunctive terms (see below).
Does the DoorDash, Inc. settlement mean my data has been deleted?+
No, the order does not automatically delete your data. You retain full rights under state privacy law (CCPA, CPA, TDPSA, VCDPA, and others) to submit your own deletion request. OfflistMe can generate a compliant deletion email pre-addressed to the respondent’s privacy contact.
How can I read the original state-AG order?+
The California Attorney General press release is available at https://oag.ca.gov/news/press-releases/attorney-general-bonta-secures-settlement-doordash-violating-californians. The case / matter number is California AG Case (2024).