\n\n
Governor Gavin Newsom has signed SB 690, a new California law that eliminates the private right of action for website‑based pen register and trap‑and‑trace claims under the California Invasion of Privacy Act (CIPA). The legislation, which passed the Legislature on August 28, 2026 and was signed on September 30, 2026, is designed to halt the surge of demand letters and lawsuits that have targeted online businesses since early 2025. By removing the private cause of action, SB 690 is expected to reduce litigation costs for tech companies and clarify enforcement authority, leaving the Attorney General as the primary enforcer of CIPA. This reform matters because it curtails a growing “legal weapons‑of‑mass‑disruption” strategy used by plaintiffs’ firms, providing greater certainty for digital services and reinforcing California’s broader privacy agenda. Watch next for how the Attorney General’s office will prioritize enforcement, potential challenges to the law’s constitutionality, and whether other states will adopt similar reforms to curb pen register abuse. [[1]]