Halloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run ScanHalloween DealsAmazon USOctober picks are moving - compare before checkoutAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
World desk3 min

California SB 690 Limits Private Lawsuits Over Some Website-Tracking Claims

SB 690 limits private lawsuits over a defined category of online Section 638.51 claims beginning January 1, 2027, but it does not end all CIPA or website-tracking claims.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

California’s SB 690, signed September 30, 2026, changes who can sue over a specific kind of alleged online surveillance under the state’s wiretapping law. Starting January 1, 2027, only the California Attorney General may bring a claim against a private actor under Penal Code Section 638.51 when the alleged violation arises from conduct on a website, online application, or mobile application. The change does not eliminate all private claims under California’s Invasion of Privacy Act (CIPA), or provide a blanket exemption for website tracking.

What SB 690 changes

SB 690 narrows private enforcement of Section 638.51, CIPA’s pen-register and trap-and-trace provision, for a defined category of online conduct. Under the amendment as described by current legal analyses, an action against a private actor for an alleged Section 638.51 violation arising from conduct on a website or application may be brought only by the Attorney General. Morgan Lewis reproduces the statutory language; DLA Piper also describes the enacted change.

As an Amazon Associate I earn from qualifying purchases.

This is a change to who may bring specified claims, not a repeal of CIPA or a general declaration that commercial tracking is lawful. Nor does it settle whether Section 638.51 applied to internet communications in the first place; Fenwick notes that question remains distinct from the new enforcement rule.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Which claims are affected—and which are not

Claim or conduct Effect of SB 690 as reported
Private claim under Section 638.51 tied to website, online-application, or mobile-application conduct Against a private actor, only the Attorney General may bring the specified action.
Private claims under CIPA Sections 631 or 632 Not eliminated by this amendment, according to current legal analyses.
Federal Wiretap Act or other applicable legal theories Not foreclosed by this amendment; whether a claim applies or succeeds depends on its facts and governing law.
Section 638.51 claims not alleged to arise from the specified online conduct The described restriction does not establish that these claims are barred; their treatment depends on the statute and circumstances.

A Consumer Privacy World analysis likewise distinguishes the Section 638.51 change from other potential CIPA and federal claims. The amendment should therefore not be read as ending website-tracking litigation generally.

When it takes effect and what retroactivity means

Legal analyses report that Governor Gavin Newsom signed SB 690 on September 30, 2026, and that it takes effect January 1, 2027. They also report retroactive reach to qualifying pending actions commenced during the two years before that operative date, including actions commenced on or after January 1, 2025. That description is limited to pending actions within the provision’s scope; it does not mean every past or resolved case automatically disappears. See Morgan Lewis and DLA Piper.

  • September 30, 2026: reported signing date.
  • January 1, 2027: reported effective date.
  • Pending matters: the reported retroactive provision reaches qualifying pending cases commenced on or after January 1, 2025; it is not an automatic dismissal rule for every case filed since then.

Why website tracking became part of the debate

Section 638.51 was enacted as part of a statute addressing wiretapping and related surveillance. In recent litigation, plaintiffs have argued that advertising or analytics technologies captured IP addresses or other metadata in ways that implicate the provision. Those are allegations and legal theories—not a judicial finding that every analytics or advertising tool violates CIPA.

Rank #2
Notary Privacy Guard Suitable for Journal of Notarial Events
  • No more exposed information in unprotected notary journals. This product shields clients' confidential information from prying eyes. It allows the Notary Public to keep the journal open during the transaction, as NO prior client information is viewable.
  • Shields clients' AND Notaries Public' confidential information
  • GLBA and HIPAA require strict confidentiality policies and procedures. Notary Privacy Guard is a compliance tool for the professional Notary Public.
  • Decreases Notary Public's liability from exposing client information
  • Journal column headers are printed on the Notary Privacy Guard, no having to peek underneath to complete the journal entry. Becomes part of the journal and also acts as a place marker.

DLA Piper identifies Section 638.51’s $5,000-per-violation statutory damages provision as one factor contributing to litigation. That figure is context about the existing provision, not a new penalty created by SB 690. The change is focused on private enforcement of a defined class of online Section 638.51 claims.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What businesses should take from the change

SB 690 is not a compliance safe harbor. Businesses may still want to review their tracking technologies, consent-management processes, and privacy disclosures with qualified counsel, particularly because other state and federal legal theories may remain relevant. The law changes a route for private claims; it does not establish that a company’s specific data practices comply with every applicable requirement. A tracking or consent-management review can help identify issues, but neither a service nor a software tool guarantees compliance.

Rank #3
Blumberg's Law Products Official Journal of Notarial Acts without Privacy Guard Published by National Notary Association (Softcover 5-Pack)
  • Published by National Notary Association
  • Record full details of 488 notarizations in this notary journal
  • Heavyweight ledger paper with special area for a thumbprint
  • 122 pages
  • 10-7/8" wide x 8-7/16" high
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Why older descriptions of the bill can be misleading

A 2025 legislative summary described a broader proposal involving a “commercial business purpose.” That earlier proposal should not be confused with the enacted measure described by current legal analyses: a narrower restriction on private Section 638.51 claims arising from website and application conduct. See the 2025 legislative summary alongside Morgan Lewis’s account of the enacted law.

Quick Recap

Bestseller No. 2
Notary Privacy Guard Suitable for Journal of Notarial Events
Notary Privacy Guard Suitable for Journal of Notarial Events
Shields clients' AND Notaries Public' confidential information; Decreases Notary Public's liability from exposing client information
$9.95
Bestseller No. 3
Blumberg's Law Products Official Journal of Notarial Acts without Privacy Guard Published by National Notary Association (Softcover 5-Pack)
Blumberg's Law Products Official Journal of Notarial Acts without Privacy Guard Published by National Notary Association (Softcover 5-Pack)
Published by National Notary Association; Record full details of 488 notarizations in this notary journal
$106.25

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.