The California Privacy Protection Agency (CPPA) flexed its CCPA enforcement muscle in March 2025 when it entered into a stipulated settlement (Order) with American Honda Motor Co. The CPPA’s inaugural enforcement action, which required the automobile distributor to pay a $632,500 fine, signaled the agency’s stance on CCPA compliance – one that balances a strict reading of the statute with, perhaps, a more practical focus on readily provable violations. This article, with insights from Kelley Drye & Warren, Manatt and ZwillGen, examined the Order and its implications, evaluated the CPPA’s enforcement approach and offered practical compliance lessons for companies.