Uses a difference-in-differences (DID) design to analyze shifts from online to offline purchase of sensitive healthcare products after the announcement (but prior to implantation) of the California Privacy Protection Act (CCPA).