cdpr lawsuit update