Regulatory Watch  /  California  /  Proposed bill
Moderate impactProposed billPassed

California Legislature passes SB 690 to limit pen register lawsuits under CIPA

On August 28, 2026 the California Legislature passed SB 690, a bill that would eliminate private lawsuits for website-based pen register claims under the California Invasion of Privacy Act. The bill would restrict such claims to actions brought only by the Attorney General and apply retroactively to pending claims filed on or after January 1, 2025. The measure now heads to Governor Newsom for signature, with an effective date of January 1, 2027 if signed.

Why it matters: The bill removes private rights of action for website pen register claims, potentially affecting many pending lawsuits.

Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.

Sources
California Legislature Passes CIPA Pen Register Reform Bill and Sends It to Governor
Covington Inside Privacy · primary source · Sep 14, 2026
California Governor Signs SB 690, Eliminating Private Website-Based CIPA Pen Register Claims and Calling for Broader CIPA Reform
Covington Inside Privacy · Oct 5, 2026
Details
JurisdictionCalifornia
RegulatorCalifornia Attorney General
LegislatureCalifornia State Legislature
LawCalifornia Invasion of Privacy Act (CIPA)
BillSB 690
StatusPassed
PublishedSeptember 14, 2026
EffectiveJanuary 1, 2027
Topicsprivacy, tracking
Datapersonal