CIPA Cases: Rulings, Settlements & Deep Dives

The plaintiffs clicked “Disable All” — and, they allege, the tracking kept running anyway. A federal court dismissed their wiretapping claim but let the pen-register claim proceed, in one of the most thorough federal endorsements yet of the theory that cookies can be illegal “pen registers.” Here’s the full breakdown, and why the “Disable All” detail should worry every site with a consent banner.

The most important financial-data CIPA case of 2026 has two faces. The claims survived dismissal because the data at issue — credit outcomes, income, FICO segments — was genuinely sensitive. Then the class was denied because tracking harms are inherently individual. Here’s the full breakdown, and why both halves matter for your site.

A Los Angeles judge threw out a CIPA “pen register” class action over a third-party website SDK — ruling, in a first-of-its-kind decision, that CIPA’s pen-register and trap-and-trace provisions were written for telephones, not websites. Here’s the full breakdown: the technology, the theory, how the court reasoned, and what it means for your site.

A federal judge threw out a CIPA “trap-and-trace” class action over website cookies and a 6Sense tracking SDK — ruling that cookies simply aren’t a §638.51 device. Here’s the full breakdown: the technology, the theory, the two-part holding, and what it means for your site.