California Attorney General Rob Bonta has reached a $1.2 million settlement with Sephora USA Inc. that resolves claims the cosmetics company violated state privacy laws.