A coalition working with Actum is drawing attention to a wave of litigation under the California Invasion of Privacy Act (CIPA), a 1967 wiretapping law that is now being applied to modern website tools and online business practices. The issue is raising concerns for organizations that operate websites using common features such as analytics, chat functions, digital advertising, and session replay tools.
More than 3,500 businesses, nonprofits, and public agencies have reportedly been sued under CIPA, with retailers representing a significant share of defendants. In some cases, potential liability has been cited at up to $5,000 per click, creating uncertainty for organizations with an online presence.
The coalition is seeking input from entities that have received demand letters or have been named in lawsuits, while also working to raise awareness of the broader impact on businesses. Legislative discussions include support for SB 690 as a potential path to clarify or address how the statute is applied.
Organizations looking to learn more or share their experiences can visit Stop CIPA Shakedowns or submit information through CIPA Stories.
