When beauty product retailer Sephora was recently slapped with a $1.2 million fine—the first enforcement action under the California Consumer Privacy Act (CCPA)—organizations across the country took note. Or at least, they ...