cybersecurity

 In 2004 CalOPPA became law and effectively required all websites to have a posted privacy policy. It contained no privacy requirements, but nevertheless significantly improved privacy of consumers. Whatever a company stated their privacy policy was had to then be followed, with the FTC and several states taking action against companies who use their consumers’ data in ways not authorized by their privacy policy.