Checklist

CIPA Compliance in 2027: A Practical Checklist for Website Tracking and Consent

California's SB 690 changes the CIPA litigation framework starting January 1, 2027, restricting certain private lawsuits involving website and app tracking while preserving other wiretapping and eavesdropping claims. For marketing, privacy, and digital teams, CIPA compliance readiness still requires visibility into tracking technologies, consistent consent enforcement, and evidence of how customer data is collected and shared.

This 10-step checklist helps organizations assess website tracking risks, identify gaps in consent management, and prepare for CIPA-related compliance reviews.

Document illustration with a 2 column checklist on it atop a multi gradient purple background

First Name *

Last Name *

Email *

Job Title *

Company *

Country *

Phone Number

Solutions of Interest

By selecting this option, your data can be stored for future forms. You can learn more about how we handle your personal information and your rights by reviewing our Privacy Notice.

Please fill in all the required fields

Details:

Download the checklist to learn:

How SB 690 changes CIPA litigation exposure and what to review across cookies, pixels, session replay tools, and third-party tracking technologies.
How to assess consent enforcement before tracking begins, validate California-specific privacy controls, and ensure customer choices propagate across downstream marketing systems.
What operational checks strengthen vendor accountability, continuous tracking monitoring, and audit-ready evidence to support CIPA compliance decisions.
Use this practical framework to align marketing, privacy, and digital teams on tracking governance, identify where consent enforcement breaks down, and establish ongoing controls as websites, vendors, and regulatory requirements change.