The California Comprehensive Computer Data Access and Fraud Act is in ยง502 of the California Penal Code. According to the State Administrative Manual of California, the Act From Wikipedia
The lawsuit accuses Amazon of secretly gathering sensitive geolocation data via its Ads SDK without user consent, violating California privacy laws.