This company deserves to die.
CCPA actually has way more teeth than GDPR, because California's Unfair Competition Law allows residents to enforce laws that do not otherwise provide a private right of actions. (though this still needs to be proved out in the courts)