CCPA

As companies comply with privacy laws like GDPR and CCPA, many have insecure practices for giving users their data and some outsource user identity verification

but it could let snoops & hackers see it too. Researchers have proved they can use access rights to get other people's files & @jeanqasaur had her Spotify data downloaded by a miscreant: https://www.n...