Compliance Stuff

  A broad coalition of California businesses, nonprofits, healthcare providers, and community organizations formally launched a campaign this week to push for reform of the state law being weaponized against businesses that use standard website tools. The Reform CIPA Coalition is backing the revival of legislative efforts to limit the law’s scope and put a halt to the trend that has led to thousands of lawsuits and countless demand letters, arbitrations, and settlements. The coalition’s April 6 launch is a meaningful development and signals a renewed effort to push for a legislative fix that was paused last year. Here’s what you need to know and some steps you can take as the debate shakes out. The Law That Wasn’t Built for the Internet The California Invasion of Privacy Act (CIPA) was enacted in 1967 to address old-fashioned wiretapping and eavesdropping: phone calls, recording devices, and the kinds of things you’d expect to see in spy movies and soap operas . It was never desig...

A California bill aimed at curbing the explosion of lawsuits filed against businesses using common website tools like cookies, pixels, and session replay software has stalled out in the 2025 legislative session, meaning your business will remain vulnerable to the newest type of privacy litigation for at least the next year . Despite the Senate unanimously approving SB 690 just a month ago, the bill’s author announced on July 2 that it would be made into a “two-year bill” – meaning it will not advance further this year but may be taken up again in 2026. What does your business need to do to put yourself in the best position to defend against these California Invasion of Privacy Act (CIPA) wiretapping claims? CIPA’s Emergence as a Class Action Weapon CIPA was originally enacted in 1967 to combat traditional wiretapping and eavesdropping, primarily in the context of telephone communications. It was never designed to address the complexities of the digital age or regulate how businesses t...