California's consumer privacy law has only been in effect since 2020, but the number of lawsuits claiming businesses have violated it is climbing quickly—and they're cropping up well beyond the borders of the Golden State.

Plaintiffs filed 145 lawsuits last year to enforce provisions under California's Consumer Privacy Act (CCPA), a 60 percent increase from the 91 filed in 2020. That's according to a report published Wednesday by Akin Gump Strauss Hauer & Feld, which found that the jump in litigation was also accompanied by a shift in strategy.

Under the law, which gives California consumers a number of unprecedented data protections—including the right to know what personal data businesses have collected on them and the right to prohibit the sale of that data—plaintiffs are permitted to bring a civil action only if their personal data is breached due to a business failing to implement reasonable security procedures and practices.