Sephora received a $1.2 million fine under the CCPA in 2022 because of its failure to disclose to users that their information would be sold to third parties. Additionally, it failed to provide a withdrawal option for users.