On June 3, 2025, the California Senate passed Senate Bill 690 ("SB 690") in a unanimous 35-0 vote, advancing a measure that would significantly limit lawsuits under the California Invasion of Privacy Act ("CIPA") against businesses using standard online technologies. Notably, the bill was amended prior to passage to remove its retroactivity provision, meaning it will not apply to pending cases. The bill now moves to the Assembly for further consideration.

Over the last several years, CIPA—originally enacted in 1967 to address wiretapping and eavesdropping—has been repurposed by plaintiffs’ attorneys as a powerful tool to target online businesses for their use of common web technologies such as cookies, pixels, chatbots, and session replay tools. This has resulted in a dramatic surge of la

See Full Page