Publications

California Narrows Private CIPA Lawsuits Over Website “Pen Register” Claims

October 7, 2026
California Narrows Private CIPA Lawsuits Over Website “Pen Register” Claims

By: Jeffrey Backman, Esq., and Roy Taub, Esq.

On September 30, 2026, California Governor Gavin Newsom signed Senate Bill 690 into law. SB 690 amends the California Invasion of Privacy Act (“CIPA”), specifically Penal Code Section 637.2, to provide that only the Attorney General may bring an action against a private actor for an alleged violation of California Penal Code Section 638.51 arising from conduct on an internet website, online application, or mobile application. The law goes into effect on January 1, 2027.

Section 638.51 prohibits installing or using a pen register or a trap and trace device without first obtaining a court order, subject to specified exceptions, and plaintiffs were able to pursue those claims privately through Cal. Penal Code Section 637.2 for statutory damages of $5,000 per violation or treble actual damages. A large number of “pen register” lawsuits have been filed in recent years, and this new law eliminates such private suits.

Notably, SB 690 does not amend Section 638.51’s substantive prohibitions or exceptions. It does not alter the availability of other CIPA claims or remedies outside the online Section 638.51 context, such as claims under Sections 631, 632, or 632.7. Plaintiffs are likely to pivot to claims under these sections or pursue non-CIPA claims.

SB 690 rebalances California’s “pen register” litigation landscape by moving website- and app-based Section 638.51 enforcement to the Attorney General and extending this change to certain pending actions. The law is more targeted than the California business community would have liked and underscores the need for disciplined governance of tracking technologies and clear user-facing disclosures, as plaintiffs may recalibrate claims under other legal theories.

This publication is provided by Greenspoon Marder LLP is issued for informational purposes only and is not intended to be construed or used as general legal advice nor a solicitation of any type. Please contact the author(s) or your Greenspoon Marder LLP contact if you have any questions regarding the currency of this information. The hiring of a lawyer is an important decision. Before you decide, ask for written information about the lawyer’s legal qualifications and experience.

About Greenspoon Marder

Greenspoon Marder LLP is a full-service law firm with over 215 attorneys and more than 20 office locations across the United States. With operations from Miami to New York and from Denver to Los Angeles, our firm attracts some of the nation’s top talent in key markets and innovation hubs. Our core practice areas include Real Estate, Litigation, and Transactional Services, complemented by the capabilities of a full-service firm. Greenspoon Marder has maintained a spot on The American Lawyer’s Am Law 200 as one of the top law firms in the U.S. since 2015, and our goal is to provide exceptional client service by developing a thorough understanding of each client’s business needs and objectives in order to provide strategic, cost-effective solutions.

Cynthia Howard Chief Marketing Officer (720) 370-1182
[email protected]