cdpr lawsuit