Kimmons v. NFL Enterprises LLC

Published by Crandall Consulting · Informational litigation intelligence · Last substantive update: October 12, 2026

Docket / citation: 3:26-cv-10036-JSC · Filed: 2026-09-28

Summary

Plaintiff alleges browser tracking on nfl.com. The court questioned concrete injury and ordered defendant to justify federal jurisdiction before possible remand.

Litigation Status

Status, direction, and weight describe how tracked public sources characterize this matter as of our last review — they are informational classifications, not legal assessments.

Procedural Posture

Putative class action removed from Alameda County Superior Court; sua sponte jurisdictional review.

Reported Holding

The complaint insufficiently alleged concrete injury supporting Article III standing.

What the Court Decided

Defendant must show cause by October 16, 2026, why the action should not be remanded.

What the Court Did Not Decide

The order did not remand, dismiss, or resolve the merits.

Significance

Neutral / mixed significance. Characterizations of significance describe how the matter has generally been discussed in tracked public sources; individual holdings are often narrow, procedural, or fact-specific, and this page does not state or imply broader holdings than the sources support.

What This Page Does and Does Not Say

This page reports what our tracked public sources say about this matter — including, where identified, the procedural posture (for example, a ruling on a motion to dismiss is not a final merits decision). It does not report legal conclusions beyond those sources, does not predict outcomes, and does not constitute legal advice.

Technologies at Issue

• session replay / session recorder
• canvas fingerprinting
• cookies
• pixels
• third-party trackers
• Google Tag Manager
• Third-party browser trackers

Third parties named or identified in tracked sources: Google, The Trade Desk, Rubicon Project, OpenX, LogRocket, Inc., Shape Security, Google Ads, Campaign Manager, NFL Enterprises LLC.

Statutes Invoked

• Cal. Penal Code §§ 631(a), 638.51(a), 637.2; 18 U.S.C. § 2510 et seq. (ECPA/Wiretap Act); Cal. Penal Code § 502 (CDAFA); Cal. Const. art. I, § 1; Cal. Bus. & Prof. Code § 17200 et seq. (UCL) — one-party consent · private right of action
• Wiretap Act (cited in the order as 28 U.S.C. § 2510); 28 U.S.C. §§ 1332(d), 1441(a), 1447(c); unspecified California laws

Claims Asserted

Claims identified in tracked public sources; pleadings may include additional or amended claims.

• California Invasion of Privacy Act (Cal. Penal Code §§ 631(a), 638.51(a))
• Electronic Communications Privacy Act / federal Wiretap Act (18 U.S.C. § 2510 et seq.)
• California Computer Data Access and Fraud Act (Cal. Penal Code § 502)
• Invasion of privacy under California Constitution, Article I, Section 1
• California Unfair Competition Law (Cal. Bus. & Prof. Code § 17200 et seq.)
• Wiretap Act
• Unspecified California-law claims

What This Matter May Mean for Website Operators

Federal Wiretap Act (ECPA Title I) is a one-party consent statute with a private right of action. Consent standard and private enforceability are the structural features that most shape where website tracking claims are filed and how they are valued.

For operators using similar technologies, the recurring factual questions in matters like this one are when session recording begins relative to consent and whether input masking covers every field; whether advertising pixels transmit page URLs or hashed form data before a consent choice; what page URLs and query strings analytics tools share with third parties. Our scanner tests these behaviors empirically.

Because this matter is pending, anything reported here is procedural — allegations and interim rulings, not final determinations.

Detection of a similar technology on a website is an informational risk indicator, not a legal conclusion, and nothing in this section is legal advice.

Related Intelligence

Sources

• Kimmons v. NFL Enterprises LLC — Order to Show Cause to Defendant re: Article III Standing — U.S. District Court for the Northern District of California (GovInfo) · Tier A (Primary authority) · 2026-09-28
• NO PRIVACY IN THE HUDDLE?: NFL.com Hit with CIPA Class Action Over 182 Website Trackers — CIPAWorld · Tier E (General web) · 2026-07-10

About This Page

Publisher: Inspection-Ready Institute, Inc. (DBA Crandall Consulting), an independent website compliance and risk consultancy. We are not a law firm and nothing on this page is legal advice.

How this content is produced: Facts are extracted from publicly available sources — court and government materials, recognized legal press, professional analysis, and industry reports — by our litigation intelligence engine, stored with full source provenance, and rendered from the database. Risk guidelines are computed by a deterministic formula, never by an AI model directly. See the full methodology.

Limitations: Counts labeled "Tracked" reflect matters identified in our source set and are not official court statistics. We report what courts decided and did not decide; we do not predict outcomes.

Corrections: If you believe anything on this page is inaccurate, contact us via the contact page and we will review the underlying sources promptly.