Sephora settles consumer privacy lawsuit

Sephora failed to tell customers that it was selling their personal information, failed to allow customers to opt out of that sale, and didn’t fix the problem within 30 days as required by the law, even after it was notified of the violation, state officials said.