
SB 690 Passes California Legislature: What the CIPA Bill Changes
California SB 690 has passed the Legislature but is not law. See what the CIPA pen-register bill would change, its current status, and the Governor deadline.
The latest legal news and analysis on privacy laws.
37 articles

California SB 690 has passed the Legislature but is not law. See what the CIPA pen-register bill would change, its current status, and the Governor deadline.

The Sixth Circuit vacated denial of an injunction against Tennessee's social media age verification law but did not rule on the First Amendment merits.

A federal district court dismissed X Corp.'s challenge to New York's social media disclosure law, finding it survives First Amendment and Section 230 review.

The Ninth Circuit ruled on August 10, 2026 that Section 230 is a defense to liability, not immunity from suit, so it cannot block an immediate appeal and the social media addiction lawsuits proceed.

The FTC, Utah, and LA County sued Hims & Hers on July 29, 2026, alleging deceptive billing, buried cancellations, and health data shared with Meta and Snap.

A federal judge declared prolific plaintiff Vivek Shah a vexatious litigant on July 20, 2026, barring new CIPA website-wiretapping suits in the Central District of California without leave of court.

Two N.D. Cal. rulings in July 2026 split on website tracking-pixel wiretap claims: the federal Wiretap Act claim against Blue Shield was dismissed with leave to amend, while state wiretap claims against Google and Meta over BlueChew trackers advanced.

A federal judge granted final approval on July 14, 2026 to the $4.5M Capital Health data breach settlement. The claim window closed April 6, 2026; approved payments follow after appeals.

The Seventh Circuit ruled TCPA text messages are not telephone calls under Do-Not-Call law, creating a circuit split with the Ninth Circuit's Howard ruling.

A coalition of 42 state attorneys general secured an $18 million settlement with 23andMe over its 2023 genetic data breach. The money goes to the states, not a new consumer payout.

SCOTUS denied emergency bids to block Texas's SB 2420 app store age verification law on July 6, 2026. The merits are undecided; Fifth Circuit review is next.

Virginia's 2022 facial recognition framework for local and campus police expired July 1, 2026. Agencies are back under the 2021 ban on purchasing or deploying FRT without express statutory authorization.

A federal judge granted a preliminary injunction on June 27, 2026 blocking Nebraska's LB 383 social media age-verification and parental-consent mandates on First Amendment grounds.
The Supreme Court held 6-3 on June 29, 2026 that a geofence warrant is a Fourth Amendment search. Chatrie v. United States (No. 25-112) extends Carpenter to phone location data.

A divided Sixth Circuit revived Ohio's parental-consent social media law on June 18, 2026 and held NetChoice has no standing to assert minors' rights.

Vermont signed H.816 on June 17, 2026, barring AI-delivered mental health therapy. Diagnosis and treatment are reserved for qualified professionals.

Florida AG James Uthmeier sued TikTok on June 15, 2026 under HB3, Florida's social media minors law, seeking a public-nuisance ruling and per-violation penalties.

FISA Section 702 lapsed June 12, 2026 after the House rejected an extension 198 to 218. Why warrantless surveillance continues anyway, and what 50 U.S.C. 1881a does.

Vermont H.211 passed the legislature May 29, 2026 and awaits Gov. Phil Scott. What the data broker overhaul would do, and what it would not, if signed.

A bankruptcy judge approved the $46.75M 23andMe data breach settlement on July 6, 2026. Here is what the payout tiers mean and how distribution works.

The ACLU alleges Florida police wrongly arrested Robert Dillon on a 93% facial recognition match. What the June 2026 lawsuit claims and what the law requires.

Connecticut's Public Act 26-64, signed May 27, 2026, requires facial-recognition entrance signs and limits license-plate-reader data. Here is what it does.

Colorado Gov. Polis signed SB26-051 on June 3, 2026, moving online age checks to the device operating system. It takes effect January 1, 2028.

Vermont Governor Phil Scott signed S.71, the Data Privacy and Online Surveillance Act, into law on June 16, 2026, eight days after vetoing it. The Act adds consumer data rights, a data-minimization duty, and a clinic-geofencing ban, effective January 1, 2028.