As someone who trains AI for a living, the resultant fines are definitely not worth my data.
The biggest fine ever recorded for CCPA violations was against Disney, and it was for a paltry $2.75 million. Disney pulls in $2.75 million in revenue every ~10 mintues.
The potential fines for these types of laws are basically considered a cost of doing business if they ever need to be paid, and pale in comparison to the revenue earned by monetizing user data.
I asked what other enforcement mechanisms there could be since an added fine isn't really teeth-y enough unless it follows the EU model for privacy violations: initial fine and a requirement to change behaviour, no change in behaviour increases the fine up to 6% global revenue, and the fines will keep coming until the behaviour is changed.
Perhaps for the company you work at it might not be worth it but we are talking about one of the most profitable companies in the history of mankind.
Given the marginal value of my data to training anything (near zero), the lawsuit costs (even if I personally don't see any of the money) is far too large. I am not saying they definitely won't do it, they've bumbled into worse situations before but this feels like an obvious own goal if they try.