> The privacy violation that infuriates me the most is that Visa and Mastercard sell your purchase data, and I don't believe CCPA applies to them. Like cell pho

> The privacy violation that infuriates me the most is that Visa and Mastercard sell your purchase data, and I don't believe CCPA applies to them. Like cell phone companies selling tower-based location data, the credit card's sale of data is unavoidable and completely hidden from consumers. If they do business in CA, why wouldn't CCPA apply to them? Even for HIPAA-covered entities, the CCPA still applies, just not all the parts (specifically there are exceptions for health data).