Published · United States
CCPAHigh severityRule change
California Attorney General restricts CIPA claims as Newsom signs SB-690
SB-690 limits the private right of action under the California Invasion of Privacy Act for website and app tracking technologies, shifting enforcement to the state attorney general.
2 sources · California Attorney General
What happened
- The California legislature passed SB-690, which narrows private lawsuits under CIPA for violations involving internet tracking technology.
- Governor Gavin Newsom signed the bill on 1 October 2026, making the change effective immediately.
Why it matters
Companies that rely on private litigation threats to enforce CIPA compliance will no longer face such suits, but must still meet statutory privacy obligations and may face AG enforcement actions.
Business impact
Businesses using cookies or similar tracking must adjust risk assessments, focusing on state enforcement rather than private claims, and ensure documentation to satisfy potential AG investigations.
Drafted automatically from the sources below. How we write summaries
Does this summary seem wrong?2 sources
- Privacy WorldTrade press(opens in a new tab)
Pen Register and Trap-and-Trace Claims Involving Websites and Apps Restricted to Enforcement by the California Attorney General as Governor Newsom Signs SB-690
https://www.privacyworld.blog/2026/10/pen-register-and-trap-and-trace-claims-involving-websites-and-apps-restricted-to-enforcement-by-the-california-attorney-general-as-governor-newsom-signs-sb-690/
- Inside Privacy (Covington)Trade press(opens in a new tab)
California Governor Signs SB 690, Eliminating Private Website-Based CIPA Pen Register Claims and Calling for Broader CIPA Reform
https://www.insideprivacy.com/state-privacy/california-governor-signs-sb-690-eliminating-private-website-based-cipa-pen-register-claims-and-calling-for-broader-cipa-reform/
Discussion
No comments yet. Start the discussion.