$50.0M
Class Action
California Data Privacy Lawyer
Has a company exposed, sold, or mishandled your personal information? At Wilshire Law Firm — an award-winning, nationally recognized team — we help Californians enforce their CCPA privacy rights and pursue compensation. Contact us 24/7 for a free case review — there are no fees unless you get paid.
- $3B+RECOVERED
- 7X"BEST LAW FIRM" AWARDS
- 24/7AVAILABILITY & SUPPORT
- 500+LEGAL PROFESSIONALS
Understanding Your Data Breach & Privacy Case
Explore essential resources on your rights, your options, and what to expect — everything you need to navigate the legal process, all in one place.
Data privacy law gives California consumers legal control over how businesses collect, use, share, and protect their personal information. The California Consumer Privacy Act (CCPA), expanded by the California Privacy Rights Act (CPRA), generally grants you the right to know what data is collected about you, request deletion of that data, opt out of the sale or sharing of your information, and hold companies accountable when they fail to safeguard it. A legal professional can explain how these rights apply to your situation during a free case review.
Most data privacy claims arise when a company fails to protect information it was trusted to hold. The violations we see most often include data breaches that expose financial, medical, or personal records, the unauthorized sharing or sale of consumer data, failure to use reasonable security measures, and the misuse of personal information for marketing. These failures can lead to identity theft, financial loss, and serious emotional distress.
Wilshire Law Firm is an award-winning, nationally recognized team with deep experience in consumer protection and privacy litigation. Our attorneys investigate how your data was exposed, identify the businesses responsible, and pursue accountability through individual claims and class actions. We keep you informed with clear communication at every stage — and there are no fees unless you get paid.
California data breach victims may be able to recover both statutory and actual damages. Under the CCPA (California Civil Code §1798.150), consumers can generally seek statutory damages of $100 to $750 per incident — or actual damages if greater — when a business's failure to maintain reasonable security leads to a breach. You may also pursue compensation for financial losses, identity-theft protection costs, and emotional distress. Because recovery varies by case, a legal professional can review your losses during a free case review.
Deadlines depend on the legal theory behind your claim, so it is best to act promptly. Claims are often subject to a statute of limitations of two to four years, depending on whether they arise under the CCPA, unfair-competition law, or a common-law theory such as negligence. Because a missed deadline can bar your case entirely, it's wise to speak with a legal professional as soon as you learn your data may have been compromised.
Meet Our Data Breach & Privacy Attorneys
Nationally-Recognized Powerhouse, Fighting for the Justice You Deserve
Our award-winning attorneys have recovered billions for clients while taking on insurance companies and major corporations.
John G. Yslas, Esq.Senior Partner, Chair of the Employment Wage & Hour Class Action Department
Thiago M. Coelho, Esq.Partner
Arrash Fattahi, Esq.Partner
Shervin G. Ghanoongooi, Esq.Partner
Benjamin Haber, Esq.Partner
Nicol Hajjar, Esq.Partner
Diego Aviles, Esq.Junior Partner
Jeffrey Bils, Esq.Junior Partner
Emily Borman, Esq.Junior Partner
Jose Maria D. Patino, Jr., Esq.Junior Partner
Christina M. LeJunior Partner
William M. Pao, Esq.Junior Partner
Eugene Zinovyev, Esq.Junior Partner$0.5M
$0.5M
Past results do not guarantee similar outcomes. Each case is unique and evaluated on its own facts.
How Do I Know If I Have a Data Privacy Claim in California?
You may have a valid data privacy claim if a business collected your personal information, failed to protect or lawfully handle it, and you suffered harm as a result. Under the CCPA, a private right of action generally applies when nonencrypted, nonredacted personal information is exposed because a company failed to maintain reasonable security. Signs of harm include unauthorized accounts, fraudulent charges, identity theft, or notice of a data breach. California's privacy statutes and deadlines apply, so contact Wilshire Law Firm's data privacy attorneys for a free case evaluation.
Start Your Free Data Breach & Privacy Case Review
- Available 24/7
- Hablamos Español
- Nationally-Recognized Powerhouse Team
As seen in:
We'll contact you within minutes
No fees unless you get paid.
Record breaking results
Winners of #1 Settlements in California
Our attorneys have recovered billions of dollars, including some of the biggest settlements in California.
17#1 Settlements in California, 2022–2024*
TopVerdict #1TopVerdict.com #1 settlements
1–1 of 17
#1 Truck v. Pedestrian Accident Settlement
2024
#1 Multi-Vehicle Accident Settlement
2024
#1 Equipment Malfunction Settlement
2024
#1 Car v. Stationary Object Collision Settlement
2024
#1 Bus v. Passenger Accident Settlement
2024
#1 Whistleblower Retaliation Settlement
2023
#1 Underinsured Motorist Settlement
2023
#1 Slip & Fall Accident Settlement
2023
#1 Negligent Security Settlement
2023
#1 Ladder Accident Settlement
2023
#1 Hotel Premises Liability Settlement
2023
#1 Car v. Car Collision Settlement
2023
#1 Bicycle Accident Settlement
2023
#1 Pregnancy Discrimination Settlement
2022
#1 Age/Disability Discrimination Settlement
2022
#1 Wrongful Termination Settlement
2022
#1 Meal & Rest Breaks Settlement
2022
*#1 settlements in California have been awarded by TopVerdict.com. Past results do not guarantee similar outcomes.
Data Breach & Privacy FAQs
Our Most Frequently Asked Questions
We've answered the most common ones below. If yours isn't here, call us — we're available 24/7.
California gives residents significant control over how businesses collect, use, share, and protect their personal information, including rights to know what data is collected and to have certain information deleted. When a company fails to safeguard information it was trusted to hold, affected consumers may have legal options. These rights come from California's privacy laws, which have been strengthened over time.
Most claims arise when a company fails to protect information it was entrusted with, most often through a data breach that exposes unencrypted personal data because of inadequate security. Other issues include collecting or sharing personal information without proper disclosure or consent. Whether a violation supports a claim depends on how the data was handled and what harm resulted.
Not always. Depending on the legal theory, a claim may rest on the exposure of your unencrypted personal information itself, along with the time, stress, and heightened risk of identity theft that can follow, even without a specific dollar loss. What you need to show varies by the law involved, so it is worth having the facts reviewed.
Yes. Data breaches often affect thousands or even millions of people at once, so these matters are frequently pursued as class actions that combine many similar claims into a single case. This can make it practical to hold a company accountable for a security failure that harmed a large group. Some individuals may also have grounds for a separate individual claim.
The deadline depends on the legal theory behind the claim, and privacy and data breach matters can be governed by different time limits measured from the breach or its discovery. These windows can be shorter than people expect, so prompt action helps protect your rights. Because deadlines have exceptions, confirm the one that applies to your situation without delay. Learn more about the MBE CPAs data breach lawsuit.