IN RE: OTTER.AI PRIVACY LITIGATION
Summary
This August 13, 2026 N.D. Cal. order on Otter.ai's motion to dismiss denied standing and many dismissal arguments, allowing multiple privacy claims (including BIPA and certain CIPA/ECPA theories) to proceed, while dismissing the CFAA and CDAFA claims and some withdrawn counts. The court granted leave to amend certain dismissed claims and set deadlines for amendment and response.
Litigation Status
Procedural Posture
Order on defendant's Rule 12(b)(1) and 12(b)(6) motion to dismiss (ECF No. 42), after briefing and oral argument; the court ruled August 13, 2026, granting in part and denying in part, and set deadlines for any amended complaint and responsive pleading.
Reported Holding
The district court granted in part and denied in part Otter.ai's motion to dismiss. The court denied Otter's challenge to Article III standing, held that multiple statutory and common-law privacy claims were plausibly pled (including BIPA counts and certain CIPA and ECPA allegations), dismissed the CFAA and CDAFA claims, dismissed several voluntarily-withdrawn claims without prejudice, and granted leave to amend specified counts.
What the Court Decided
The court concluded plaintiffs plausibly alleged a concrete injury sufficient for Article III standing; denied dismissal of BIPA claims (Counts 15–16) and CIPA §631-based claims; found ECPA (Count 1) pleaded sufficiently; dismissed CFAA Count 2 (both §1030(a)(2)(c) and §1030(a)(4) theories) and CDAFA (Count 11); denied dismissal of unjust enrichment and UCL claims; dismissed withdrawn claims without prejudice; and granted leave to amend certain dismissed claims with specified deadlines.
What the Court Did Not Decide
The court did not resolve factual disputes about whether Otter actually identified particular voiceprints, the ultimate merits of the remaining claims, or any issues that would require development of the factual record (including consent or party-exception defenses in some contexts).
Significance
Neutral / mixed significance. Characterizations of significance describe how the matter has generally been discussed in tracked public sources; individual holdings are often narrow, procedural, or fact-specific, and this page does not state or imply broader holdings than the sources support.
What This Page Does and Does Not Say
This page reports what our tracked public sources say about this matter — including, where identified, the procedural posture (for example, a ruling on a motion to dismiss is not a final merits decision). It does not report legal conclusions beyond those sources, does not predict outcomes, and does not constitute legal advice.
Technologies at Issue
- AI meeting transcription/assistant (Otter Notetaker)
- virtual meeting platforms (Zoom, Microsoft Teams, Google Meet)
- voiceprints / speaker-identification (biometric voice data)
Third parties named or identified in tracked sources: Otter.ai, Zoom, Microsoft Teams, Google Meet.
Statutes Invoked
Claims Asserted
- Electronic Communications Privacy Act (ECPA, 18 U.S.C. § 2511)
- Computer Fraud and Abuse Act (CFAA, 18 U.S.C. § 1030)
- California Invasion of Privacy Act (CIPA, Cal. Penal Code §§ 631, 632)
- California Comprehensive Computer Data and Access Fraud Act (CDAFA, Cal. Penal Code § 502)
- Illinois Biometric Information Privacy Act (BIPA, 740 ILCS 14/1 et seq.)
- Washington Privacy Act (Wash. Rev. Code § 9.73.030)
- California Unfair Competition Law (UCL, Cal. Bus. & Prof. Code § 17200)
- Unjust enrichment
- Intrusion upon seclusion (common law)
- Declaratory judgment
What This Matter May Mean for Website Operators
Washington Privacy Act is an all-party consent statute with a private right of action. Consent standard and private enforceability are the structural features that most shape where website tracking claims are filed and how they are valued.
For operators using similar technologies, the recurring factual questions in matters like this one are what page URLs and query strings analytics tools share with third parties. Our scanner tests these behaviors empirically.
Detection of a similar technology on a website is an informational risk indicator, not a legal conclusion, and nothing in this section is legal advice.
Related Intelligence
Sources
About This Page
Publisher: Inspection-Ready Institute, Inc. (DBA Crandall Consulting), an independent website compliance and risk consultancy. We are not a law firm and nothing on this page is legal advice.
How this content is produced: Facts are extracted from publicly available sources — court and government materials, recognized legal press, professional analysis, and industry reports — by our litigation intelligence engine, stored with full source provenance, and rendered from the database. Risk guidelines are computed by a deterministic formula, never by an AI model directly. See the full methodology.
Limitations: Counts labeled "Tracked" reflect matters identified in our source set and are not official court statistics. We report what courts decided and did not decide; we do not predict outcomes.
Corrections: If you believe anything on this page is inaccurate, contact us via the contact page and we will review the underlying sources promptly.
Is Your Website Creating Hidden Tracking Risk?
Scan your site for third-party tracking and potential wiretap exposure. Free, no account required.
Scan My Website