California announces $1.8 million Lyft privacy settlement

On 29 October 2026, California's Attorney General announced a settlement with Lyft including $1.8 million in civil penalties over alleged CCPA violations in its opt-out process. Users reportedly had to navigate from the app through several links to a webpage, log in again and provide additional information.

According to the Attorney General, the settlement requires an in-app opt-out option and notice to California consumers about their rights. The concern was unnecessary friction for users seeking to stop sale or sharing, even though Lyft already knew their identity through their app account.

For mobile-app privacy teams, the case supports testing the entire opt-out journey on a device. Review redirects, repeated authentication and required fields, and check whether the existing account session can eliminate avoidable steps. These are practical lessons from the announced settlement, rather than new requirements created for every app.