California Consumer Privacy Act
The CCPA is California's primary consumer privacy law, granting residents rights over personal data collection and limiting how businesses share that data.
Last refreshed: 11 May 2026 · Appears in 1 active topic
Does FIFA's accreditation form break California's privacy law by sharing workers' data with governments?
Timeline for California Consumer Privacy Act
Cited as the basis for Local 11's data-privacy complaint running alongside the labour dispute
2026 FIFA World Cup: SoFi Workers Return to Table After Strike VoteMentioned in: SoFi workers vote on a strike
2026 FIFA World CupReceived a formal complaint over FIFA's accreditation data collection and sharing
2026 FIFA World Cup: SoFi workers take FIFA to privacy lawCited as basis for union's demand for AG investigation into FIFA accreditation data
2026 FIFA World Cup: UNITE HERE Local 11 widens SoFi demands at Steyer rallyLocal 11 names FIFA in US labour filing
2026 FIFA World CupHow did FIFA's World Cup accreditation violate California privacy law?
What is the CCPA and who does it protect?
What is the CCPA complaint against FIFA about?
Background
The California Consumer Privacy Act is a US state privacy law enacted in 2018 and strengthened by the California Privacy Rights Act (CPRA) in 2020, giving California residents the right to know what personal data is collected about them, to delete it, to opt out of its sale, and to non-discriminatory treatment for exercising those rights. On approximately 8 May 2026, UNITE HERE Local 11 filed a California Attorney General complaint alleging that FIFA's 2026 World Cup accreditation process violated the CCPA by requiring Social Security numbers, nationality, addresses and country of birth, with consent language authorising sharing of that data with government authorities including foreign states.
The CCPA applies to for-profit entities that collect personal data of California residents and meet certain thresholds, and to their service providers. FIFA's application of the accreditation consent form to California-based stadium workers — some of whom may be undocumented or have immigration concerns — creates potential CCPA exposure: the specific concern is that the data-sharing authorisation was not clearly presented as optional or limited in scope.
The California AG complaint runs parallel to the NLRB charge and reflects a broader legal strategy by the union: attacking both the labour conditions and the data-privacy dimension of FIFA's World Cup operating model simultaneously.
