sephora fined for violating california consumer privacy act