customers’ rights under the CCPA