It’s 2025, and somehow, we’re still dealing with lawsuits over a law that was born in the pen registers and rotary phones era. That law, the California Invasion of Privacy Act (CIPA), a decades-old statute that’s suddenly found new life in the digital age, could put your company in legal crosshairs based on its website and its tracking technology.
Over the past year, we’ve seen a sharp uptick in demand letters and litigation targeting businesses over alleged privacy violations tied to digital website tools like: • Chatbots and live chat features • Website analytics tools • Ad campaign tracking (Meta Pixel) • Social media plugins and integrations
In many of these cases, plaintiffs allege that businesses are “eavesdropping” on users, all under the theory that using these technologi