“I had a minor panic attack, literally, upon receipt, as I thought I was about to be sued.”
Small site operators got CCPA letters from a “Victor” in Nice, citing a 45-day legal deadline. The law didn’t even apply to most of them. Some paid lawyers to answer anyway. The sender turned out to be a research study run by Princeton and Radboud. Nobody consented to being studied, and the researchers got their data from people’s fear of a lawsuit.