Navigating CIPA Claims: Strategies for Protecting Your Business

Описание: Jessica Lee chairs Loeb & Loeb's Privacy, Security & Data Innovations practice and serves as Chief Privacy & Security Partner. She provides strategic legal counsel to companies navigating complex data governance issues, helping them turn compliance into a competitive advantage. Jessica advises on the full spectrum of privacy, security, and AI-related regulations, focusing on companies navigating the issues that arise from AdTech, the use of health data and other sensitive information, and other data monetization practices.

Here’s a glimpse of what you’ll learn:

• [00:00] Introduction
• [03:26] Jessica Lee’s career journey from securities litigation to Loeb & Loeb’s Chief Privacy & Security Partner
• [06:29] An overview of California’s Invasion of Privacy Act (CIPA) and its impact on businesses
• [09:03] Examples of various CIPA claims, from session replay cookies to chatbots and social media pixels
• [14:35] How companies can mitigate CIPA-related risks
• [19:42] The importance of cookie governance and regular website audits
• [25:21] Jessica’s personal privacy tip

In this episode…

The California Invasion of Privacy Act (CIPA) is putting many businesses under legal scrutiny. Modeled after federal wiretapping laws, CIPA requires two-party consent for recording or intercepting communications and has become a target for the plaintiffs’ bar. The law has been used to challenge the use of session replay cookies, chatbots, and social media pixels, with claims that these technologies intercept data and communications without proper consent. As courts issue mixed rulings, businesses need to adapt their privacy frameworks and governance programs to reduce the risk of CIPA violations.

Addressing CIPA-related risks requires a proactive and thorough approach. Managing website tracking technologies is no longer just about implementing cookie consent banners. Businesses also need to conduct comprehensive website audits to identify which cookies, pixels, and trackers are in use, ensuring these technologies comply with CIPA's consent requirements. Implementing a cookie governance program, securing thorough contractual agreements with third-party vendors, and disclosing data collection and consent practices in privacy notices are critical steps for mitigating CIPA-related risks. By adopting these strategies, companies can reduce their exposure to legal action and maintain trust with their users, even as courts continue to interpret CIPA’s application to modern technologies.

In this episode of She Said Privacy/He Said Security, Jodi and Justin Daniels speak with Jessica Lee, Chief Privacy & Security Partner and Chair of the Privacy, Security, and Data Innovations Practice at Loeb & Loeb, about managing CIPA compliance. Jessica provides a detailed overview of CIPA’s requirements and breaks down why certain technologies are being targeted. She also discusses the importance of regular website audits and offers practical advice on mitigating risk by implementing a cookie governance program, reviewing consent management practices, and establishing contractual protections.

Resources mentioned in this episode:

• Jodi Daniels on LinkedIn -   / jodihoffmandaniels  
• Justin Daniels on LinkedIn -   / justinsdaniels  
• Red Clover Advisors’ website - https://redcloveradvisors.com/
• Red Clover Advisors on LinkedIn -   / redcloveradvisors  
• Red Clover Advisors on Facebook -   / redcloveradvisors  
• Red Clover Advisors’ email: [email protected]
• Data Reimagined: Building Trust One Byte at a Time by Jodi and Justin Daniels - https://redcloveradvisors.com/book-sa...
• Jessica B. Lee on LinkedIn -   / jessicalee821  
• Loeb & Loeb LLP - https://www.loeb.com/en

Sponsor for this episode...

This episode is brought to you by Red Clover Advisors.

Red Clover Advisors uses data privacy to transform the way that companies do business together and create a future where there is greater trust between companies and consumers.

Founded by Jodi Daniels, Red Clover Advisors helps companies to comply with data privacy laws and establish customer trust so that they can grow and nurture integrity. They work with companies in a variety of fields, including technology, e-commerce, professional services, and digital media.

To learn more, and to check out their Wall Street Journal best-selling book, Data Reimagined: Building Trust One Byte At a Time, visit https://www.redcloveradvisors.com.