CIPA Cases

European Wax Center agreed to pay $5 million to settle claims that its website ran the Meta Pixel, Attentive, LinkedIn, and Snap trackers — disclosing visitor data to advertising partners without consent. It’s a settlement, not a ruling, and that’s exactly what makes it a warning: the tracking stack that triggered it is running on thousands of ordinary business websites right now.

A federal court let both a CIPA §631 wiretap claim and a federal Wiretap Act claim survive dismissal against a telehealth provider — because the site relied on browsewrap consent that the court found inadequate. It’s one of 2026’s clearest warnings that a passive “notice on the page” is not consent.

The plaintiffs clicked “Disable All” — and, they allege, the tracking kept running anyway. A federal court dismissed their wiretapping claim but let the pen-register claim proceed, in one of the most thorough federal endorsements yet of the theory that cookies can be illegal “pen registers.” Here’s the full breakdown, and why the “Disable All” detail should worry every site with a consent banner.

The most important financial-data CIPA case of 2026 has two faces. The claims survived dismissal because the data at issue — credit outcomes, income, FICO segments — was genuinely sensitive. Then the class was denied because tracking harms are inherently individual. Here’s the full breakdown, and why both halves matter for your site.

A Los Angeles judge threw out a CIPA “pen register” class action over a third-party website SDK — ruling, in a first-of-its-kind decision, that CIPA’s pen-register and trap-and-trace provisions were written for telephones, not websites. Here’s the full breakdown: the technology, the theory, how the court reasoned, and what it means for your site.

A federal judge threw out a CIPA “trap-and-trace” class action over website cookies and a 6Sense tracking SDK — ruling that cookies simply aren’t a §638.51 device. Here’s the full breakdown: the technology, the theory, the two-part holding, and what it means for your site.