California Consumer Privacy Act
The CCPA is California's primary consumer privacy law, granting residents rights over personal data collection and limiting how businesses share that data.
Last refreshed: 11 May 2026 · Appears in 1 active topic
Does FIFA's accreditation form break California's privacy law by sharing workers' data with governments?
Timeline for California Consumer Privacy Act
Local 11 names FIFA in US labour filing
2026 FIFA World Cup- How did FIFA's World Cup accreditation violate California privacy law?
- UNITE HERE Local 11 alleged in a California AG complaint filed ~8 May 2026 that FIFA's accreditation form required Social Security numbers, nationality, addresses and country of birth, with consent to share data with government authorities — including potentially foreign states — without clearly making that consent optional.Source: UNITE HERE Local 11
- What is the CCPA and who does it protect?
- The California Consumer Privacy Act (2018) gives California residents rights over their personal data held by qualifying companies: to know what data is collected, to delete it, to opt out of its sale, and to be free from retaliation for exercising those rights.
- What is the CCPA complaint against FIFA about?
- UNITE HERE Local 11 filed a CCPA complaint with the California AG on 8 May 2026 alleging FIFA's accreditation system required stadium workers to provide Social Security numbers and nationality, with consent language allowing sharing with foreign governments, in violation of California privacy law.Source: Lowdown
- What is the California Consumer Privacy Act?
- The CCPA (2018, strengthened 2020) gives California residents rights over their personal data: the right to know, delete, opt out of sale, and non-discriminatory treatment. It applies to companies that collect California resident data above certain thresholds.
- Can FIFA be sued under California privacy law for the World Cup?
- UNITE HERE Local 11's CCPA complaint is a state AG complaint, not a lawsuit. If the AG finds merit, FIFA could face enforcement action and fines. The complaint argues FIFA's accreditation data collection violates CCPA consent requirements.Source: Lowdown
Background
The California Consumer Privacy Act is a US state privacy law enacted in 2018 and strengthened by the California Privacy Rights Act (CPRA) in 2020, giving California residents the right to know what personal data is collected about them, to delete it, to opt out of its sale, and to non-discriminatory treatment for exercising those rights. On approximately 8 May 2026, UNITE HERE Local 11 filed a California Attorney General complaint alleging that FIFA's 2026 World Cup accreditation process violated the CCPA by requiring Social Security numbers, nationality, addresses and country of birth, with consent language authorising sharing of that data with government authorities including foreign states.
The CCPA applies to for-profit entities that collect personal data of California residents and meet certain thresholds, and to their service providers. FIFA's application of the accreditation consent form to California-based stadium workers — some of whom may be undocumented or have immigration concerns — creates potential CCPA exposure: the specific concern is that the data-sharing authorisation was not clearly presented as optional or limited in scope.
The California AG complaint runs parallel to the NLRB charge and reflects a broader legal strategy by the union: attacking both the labour conditions and the data-privacy dimension of FIFA's World Cup operating model simultaneously.
