California Enacts SB 690, Curtailing Private CIPA Pen-Register Lawsuits Against Websites and Apps
On September 30, 2026, California Governor Gavin Newsom signed Senate Bill 690, materially changing the litigation landscape under the California Invasion of Privacy Act (CIPA). The amendment sharply limits private lawsuits under Penal Code § 638.51 based on alleged use of a pen register or trap-and-trace device on a website, online application, or mobile application. For businesses that have faced the recent wave of CIPA demand letters and class actions aimed at pixels, analytics tools, advertising technology, and other online tracking, the change is significant. But SB 690 is not a wholesale repeal of CIPA. It leaves intact CIPA’s separate…
