Greenley v. Kochava
Summary
The article reports a growing wave of California CIPA "pen-register" complaints and demand letters alleging that common third-party website trackers (analytics tags and pixels that fire on page load) constitute pen registers under California Penal Code §§638.50-.51. It notes several Superior Court rulings denying dismissal at the pleading stage and a federal district court order in Greenley v. Kochava adopting the pen-register framing, and describes industrialized templated complaints and settlement pressure on website owners.
Litigation Status
Procedural Posture
The article describes an emergent pattern: plaintiffs' counsel circulation of templated demand letters and CIPA complaints alleging that analytics tags/pixels firing on page load are pen registers under Penal Code §638.51(a), combined with some courts refusing to dismiss those complaints at the pleading stage, producing settlement pressure on many website operators.
Reported Holding
The source reports that a string of California Superior Court rulings declined to dismiss CIPA pen-register complaints at the pleading stage and that a federal court order in Greenley v. Kochava (S.D. Cal. 2023) explicitly approved the "third-party tracker as pen register" framing.
What the Court Decided
According to the source, some California Superior Courts denied motions to dismiss CIPA pen-register complaints at the pleading stage, and a federal district court in Greenley v. Kochava adopted the framing that third-party trackers can be viewed as pen registers for purposes of CIPA claims.
What the Court Did Not Decide
The source does not report definitive rulings on the merits of the underlying privacy claims, class certification, or final resolution of damages; it also does not report any binding higher-court precedent resolving the issue statewide.
Significance
Generally viewed as plaintiff-favorable. Characterizations of significance describe how the matter has generally been discussed in tracked public sources; individual holdings are often narrow, procedural, or fact-specific, and this page does not state or imply broader holdings than the sources support.
What This Page Does and Does Not Say
This page reports what our tracked public sources say about this matter — including, where identified, the procedural posture (for example, a ruling on a motion to dismiss is not a final merits decision). It does not report legal conclusions beyond those sources, does not predict outcomes, and does not constitute legal advice.
Technologies at Issue
- Google Analytics
- Meta Pixel
- Google Tag Manager
- LinkedIn Insight
- TikTok Pixel
- JavaScript tag/loader
- region1.analytics.google.com (analytics endpoint)
Third parties named or identified in tracked sources: Google, Meta, LinkedIn, TikTok, Kochava.
Statutes Invoked
- California Penal Code §638.50(b); §638.51(a)
Claims Asserted
- California Invasion of Privacy Act (CIPA) pen-register claim under Penal Code §638.51(a) (as described in the source)
What This Matter May Mean for Website Operators
For operators using similar technologies, the recurring factual questions in matters like this one are whether advertising pixels transmit page URLs or hashed form data before a consent choice; what page URLs and query strings analytics tools share with third parties. Our scanner tests these behaviors empirically.
Because this matter is pending, anything reported here is procedural — allegations and interim rulings, not final determinations.
Detection of a similar technology on a website is an informational risk indicator, not a legal conclusion, and nothing in this section is legal advice.
Related Intelligence
Sources
About This Page
Publisher: Inspection-Ready Institute, Inc. (DBA Crandall Consulting), an independent website compliance and risk consultancy. We are not a law firm and nothing on this page is legal advice.
How this content is produced: Facts are extracted from publicly available sources — court and government materials, recognized legal press, professional analysis, and industry reports — by our litigation intelligence engine, stored with full source provenance, and rendered from the database. Risk guidelines are computed by a deterministic formula, never by an AI model directly. See the full methodology.
Limitations: Counts labeled "Tracked" reflect matters identified in our source set and are not official court statistics. We report what courts decided and did not decide; we do not predict outcomes.
Corrections: If you believe anything on this page is inaccurate, contact us via the contact page and we will review the underlying sources promptly.
Is Your Website Creating Hidden Tracking Risk?
Scan your site for third-party tracking and potential wiretap exposure. Free, no account required.
Scan My Website