I wouldn't be so sure. In this specific case, they told me to ask their customers to comply with my CCPA rights. Without that information, it's impossible for me to exercise those rights. IANAL, but that sounds like a pursuable path.

I don't see any provision in CCPA that requires that. And outside of an explicit requirement to do so, nobody is required to help you.

Edit: from https://oag.ca.gov/privacy/ccpa

> If a service provider has said that it does not or cannot act on your request because it is a service provider, you may follow up to ask who the business is. However, sometimes the service provider will not be able to provide that information. You may be able to determine who the business is based on the services that the service provider provides, although sometimes this may be difficult or impossible.

Perhaps the next step is writing to your state representative, or to Alastair Mactaggart, and complain about this hole in the legislation.

I’ve been in the lobby of hundreds of different technology companies and my understanding is that all companies are going to give you a customer list, you just have to look in the right place.

Ha -- you know what I meant: explicitly.