In a striking opinion, a federal judge in the Northern District of California has issued a scathing critique of the California Invasion of Privacy Act (“CIPA”) while ruling in favor of website operator accused of violating CIPA by deploying a Meta Pixel on its website: “The language of CIPA is a total mess. It wasContinue reading "“CIPA IS UNTENABLE”: Federal Judge Calls Upon California Legislature to Scrap CIPA While Granting Summary Judgment in Website Operator’s Favor"| CIPAWorld
2 posts published by Tammana Malik and Puja "Queenie" Amin during October 2025| CIPAWorld
This morning, the California Privacy Protection Agency (“CPPA”) announced that Minnesota and New Hampshire have joined the Consortium of Privacy Regulators, a bipartisan initiative announced in April to implement and enforce state privacy laws across the country. With the addition of two new states, a total of ten different privacy regulators are now part ofContinue reading "BREAKING: Minnesota and New Hampshire Join Bipartisan Consortium of Privacy Regulators"| CIPAWorld
When we last covered the CPPA’s first ever filing to compel Tractor Supply to comply with its investigative subpoena, a lot of folks thought it was the agency testing the waters and questioned whet…| CIPAWorld
In August 2025, a San Francisco jury reached a rare privacy verdict in Frasco v. Flo Health, holding Meta liable under the California Invasion of Privacy Act (“CIPA”) for intercepting reproductive health information from women using the Flo menstrual tracking app. Flo and other co-defendants had settled before or during trial, leaving Meta as theContinue reading "VERDICT INTACT: Meta’s Post-Trial Attempts To Avoid Liability In Massive CIPA Ruling Fall Flat As Court Refuses To Decertify ...| CIPAWorld
Eight state regulators have announced a bipartisan initiative to coordinate the implementation and enforcement of their privacy laws. The Consortium of Privacy Regulators includes the Californ…| CIPAWorld
The California Privacy Protection Agency (“CPPA”) has announced a joint investigative sweep in collaboration with the Attorneys General of California, Colorado, and Connecticut. The sweep is target…| CIPAWorld
Hello, I’m Keerti – the latest addition to the Troutman Amin team as a Law Clerk and this is my first blog here at CIPAWorld. We are diving straight into a CIPA claim that thought it had game, only…| CIPAWorld
In a watershed moment for privacy enforcement in California, the California Privacy Protection Agency (CPPA) has turned to courts to enforce a regulatory investigation. On August 6, 2025, the CPPA filed a first of its kind judicial action seeking to compel Fortune 500 company Tractor Supply Co. to comply with an investigative subpoena. While TractorContinue reading "CALIFORNIA PRIVACY PROTECTION AGENCY BARES ITS TEETH: Files First Judicial Action to Enforce Investigative Subpoena Against Trac...| CIPAWorld
Hi CIPAWorld! In the latest development in the ongoing wave of website tracker litigation, the Northern District of California court in Smith, et al., v. Rack Room Shoes, Inc., No. 24-CV-06709-RFL, 2025 WL 2210002 (N.D. Cal. Aug. 4, 2025), has allowed a putative class action against Rack Room Shoes, Inc. to proceed on claims underContinue reading "RACK ROOM SHOES, INC. WIRETAP ACT CLASS ACTION SURVIVES MOTION TO DISMISS: Court Finds Crime-Tort Exception Applies"| CIPAWorld
In a recent ruling out of the Northern District of California, the Court dismissed California Invasion of Privacy Act (“CIPA”) claims against clothing retailer The Gap Inc. (“Gap”), holding that a user’s “click” on a URL within a marketing email does not constitute “contents” of communication under CIPA. This ruling follows the Court’s previous dismissalContinue reading "MIND THE GAP: Court Grants Clothing Retailer’s Motion To Dismiss Third-Party Tracking Claims Arising ...| CIPAWorld
This morning, the California Privacy Protection Agency (“CPPA”) announced a $55,400 administrative fine on Washington-based data broker Accurate Append, Inc. for failing to register and pay an annual fee as required by the Delete Act. The Delete Act applies to all “data brokers”, defined to include any business that knowingly collects and sells to thirdContinue reading "DON’T ‘DELETE’ YOUR OBLIGATIONS: California Privacy Protection Agency Fines Data Broker $55,400 For Failure To...| CIPAWorld