CCPA investigation