Although the California Consumer Privacy Act has been in effect since January, there is still no clarity on how judges will rule in some of the class action lawsuits over third-party cookies collecting data and what constitutes a reasonable effort to protect personally identifiable information.