As part of the settlement, DoorDash will pay a $375,000 civil penalty and must comply with the California Consumer Privacy Act and the California Online Privacy Protection Act.