It’s more complicated than that. The email I received was wrong about my legal obligations to respond. First, I received the email regarding a tiny personal site I operate for the fun of it, and I don’t meet the CCPA deadlines. Second, nothing in the CCPA said I have to reply to random information-gathering requests anyway. And yet, the email gave me a deadline to respond and cited a specific law, claiming that I owed them a response.