Consumer Protection Law
Oct. 21, 2025
Old law, new risks: Navigating California's Shine the Light law
Businesses across industries are facing a surge in "Shine the Light" law requests under California Civil Code §1798.83, exposing those unprepared to respond to significant litigation risks and penalties despite compliance with newer privacy laws like the CCPA.
Wynter L. Deagle
Co-Leader
Sheppard Mullin
Intellectual Property Practice Group and a member of the Privacy and Cybersecurity team
Northeastern U School of Law
Samuel Hyams-Millard
Associate
Sheppard Mullin
Intellectual Property Practice Group and a member of the Privacy & Cybersecurity team
In recent months, businesses across a wide range of industries have experienced a notable uptick in requests under California's "Shine the Light" law, Civil Code § 1798.83, a little-known and sparsely litigated provision of the Consumer Records Act. These requests, typically sent by attorneys on behalf of a California resident who purports to have an "established business relationship" with the business, seek an accounting of the categories of personal information that have b...
For only $95 a month (the price of 2 article purchases)
Receive unlimited article access and full access to our archives,
Daily Appellate Report, award winning columns, and our
Verdicts and Settlements.
Or
$795 for an entire year!
Or access this article for $45
(Purchase provides 7-day access to this article. Printing, posting or downloading is not allowed.)
Already a subscriber?
Sign In