Share on LinkedInShare on LinkedIn

ARTICLE · 01 OCTOBER 2026

WEBSITE TRACKING UNDER CIPA: Surviving Motion To Dismiss Without Technical Specificity.

A federal court in California has ruled that plaintiffs alleging privacy violations under the California Invasion of Privacy Act need not provide granular technical details about website tracking mechanisms at the motion-to-dismiss stage. The decision addresses whether cookie-based tracking constitutes unlawful use of a pen register and what level of specificity plaintiffs must plead when alleging interception of their communications with a website.

United StatesPrivacy

In D’Antonio v. Smith & Wesson Inc., No. 5:25-CV-03085-PCP, 2026 WL 2653811, at *1 (N.D. Cal. Sept. 8, 2026), the Court denied Defendants’ motion to dismiss finding that the amended complaint sufficiently detailed to give notice of the claims and defenses. The court noted that any challenge to whether the tracking technology fell outside the statutory definition of a pen register could be addressed on a fuller record.

Plaintiffs’ Amended Complaint alleged that Defendants violated privacy rights under the California Invasion of Privacy Act (“CIPA”) by placing cookies on users’ devices even after they rejected them, unlawfully using a pen register and tracking users on their website. Smith & Wesson moved to dismiss Plaintiffs’ claims, arguing that CIPA privacy claims lacked sufficient detail.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from