01. Excessive verification for opt-outs
Honda required information beyond what CCPA allows just to honor a Do Not Sell or opt-out request.
Honda: $632.5K California privacy settlement
California's $632,500 Honda settlement focused on dark patterns: opt-out flows that asked for more information than CCPA allows, mishandled authorized agent requests, and friction that the AG described as designed to discourage exercising rights.
- CCPA
- California
Last updated
Enforcement snapshot
- Amount
- $632.5K
- Regulator
- California Attorney General
- Sector
- Automotive
- Published
- March 2025
Technical failure modes
What failed
02. Authorized agent rejection
Valid authorized-agent requests were refused or routed back to the consumer for direct verification.
03. Symmetry failures in UI
Opt-in was a single click while opt-out required navigating a multi-step flow — a textbook dark pattern.
04. Cookie banner conflated with rights
The cookie consent UI did not clearly surface the CCPA right to limit sale or sharing.
Remediation path
What Ketch would help validate
More enforcement analysis
Other settlements with the same failure modes
Next step
Do not wait for a demand letter to find the gap
Honda is the dark-patterns case. The AG made it clear that requiring extra information to opt out, refusing authorized agent requests, and burying the opt-out link are all forms of consumer-facing friction that violate CCPA — even when the underlying data flows are otherwise legitimate.
Get Started Free
Get started in less than 5 min