The coda to the story is hilarious. CCPA apparently has an exemption (I'd say loophole) for the sale of personal information to consumer reporting agencies, as long as the use of that data is covered by the Fair Credit Reporting Act. So if FCRA allows it, CCPA says go right ahead!
