Florida Website Tracking, Privacy & Wiretap Litigation
Current Landscape
Litigation activity in Florida has recently focused on whether common website tracking technologies can give rise to claims under the Florida Security of Communications Act (FSCA). Tracked matters cite a wide set of technologies appearing in pleadings and settlements, including cookies, tracking pixels (e.g., Meta Pixel), session‑replay tools, chat widgets and chatbots, customer data platforms, third‑party ad retargeting scripts, web analytics (e.g., Google Analytics 4, Floodlight), and various third‑party tracking scripts and social media pixels. Observers describe an elevated volume of filings and related actions in multiple forums.
Reported court actions and settlements capture the range of outcomes being seen. A Middle District of Florida order dated March 6, 2025 denied in part a motion to dismiss in W.W. v. Orlando Health on FSCA‑based allegations that website tracking tools captured healthcare communications; commentary on that decision notes downstream increases in related small‑claims filings. Other federal activity includes a January 7, 2026 N.D. Cal. order transferring a case to the E.D. Va. based on a forum‑selection clause. Tracked Florida settlements include Grubor v. Barefoot Dreams (Circuit Court of the 17th Judicial Circuit, Broward County) with a claims period for purchases on barefootdreams.com beginning October 14, 2023 and a potential $8.00 cash payment per valid claim, and Sophin v. WISP, Inc. (Broward County) providing an $18.00 cash payment to eligible purchasers between February 1, 2018 and September 9, 2025 (with claims/exclusion/objection deadlines and a scheduled final approval hearing noted). Law‑firm analyses and briefs describe a shift from earlier dismissals toward more surviving pleadings and continuing statutory‑interpretation questions in these matters.
Current Litigation Activity
Important New Filings
- Grubor, et al. v. Barefoot Dreams, Inc.
- Cobbs v. PetMed Express, Inc.
- Patrick J. Mika v. Rollins College
- Sophin v. WISP, Inc.
Current Filing & Litigation Trends
Tracked filings show an uptick in FSCA and related wiretap‑style claims tied to website tracking technologies, with a mix of outcomes: an observable movement from earlier dismissals toward more complaints surviving motions to dismiss in some courts, increased activity in small‑claims venues, some federal decisions permitting claims to proceed, and multiple class settlements that allocated modest cash payments to affected purchasers. Legal commentary highlights ongoing uncertainty around statutory interpretation and variable case management outcomes across jurisdictions.
Precedent Landscape: What Courts Have Decided
No decided precedent with a clear substantive direction is currently tracked.
Current Laws & Relevant Statutes
- Florida Security of Communications Act (FSCA) — Fla. Stat. § 934.01 et seq. · all-party consent · private right of action · statutory damages
Regulatory Enforcement
Agency Guidance
Global Privacy Control / Opt-Out Signals
Limited data
| Applicability | The post does not provide a government or statutory source tying GPC to FSCA compliance; it focuses on FSCA claims about interception and consent rather than global privacy controls. |
|---|---|
| Universal opt-out requirement | No |
| Recognized mechanisms | click-wrap, browser-wrap (discussed) |
Article is a practitioner summary and does not identify specific regulatory or statutory GPC requirements.
Learn more about Global Privacy Control → · How GPC posture is weighted in the risk guideline →
Changes Coming in the Next 24 Months
Coming Into Effect (Enacted)
Legislation to Watch (Pending)
- Calls for updating the Florida Security of Communications Act
Important Cases & Tracked Matters
W.W. v. Orlando Health
What the court decided: The alert reports that in W.W. v. Orlando Health, a Middle District of Florida court determined the plaintiff sufficiently alleged interception of the contents of electronic communications under the FSCA and denied in part the defendant's motion to dismiss. The alert also reports that in Shah v. Hilton Worldwide Holdings, the Northern District of California granted a motion to transfer the case to the Eastern District of Virginia based on a forum‑selection clause.
What the court did not decide: The courts did not resolve the merits of the underlying interception allegations; decisions described concern pleading-stage rulings and a transfer motion rather than final merits determinations.
Grubor, et al. v. Barefoot Dreams, Inc.
This document is a settlement agreement (with exhibits) for Grubor v. Barefoot Dreams, Inc., Case No. CACE26003507, in the Circuit Court of the 17th Judicial Circuit, Broward County, Florida. The complaint alleges Barefoot Dreams disclosed customers' personally identifiable information to third parties via tracking technologies (naming Meta Platforms and Attentive Mobile) in violation of Florida and California privacy laws and the federal ECPA; Defendant denies wrongdoing but agreed to the settlement. Class members who purchased from barefootdreams.com between October 14, 2023 and the date of notice may submit a claim (the notice indicates a potential $8.00 cash payment per valid claim).
W.W. v. Orlando Health, Inc., No. 6-24-cv-1068-JSS-RMU
What the court decided: The district court held at the motion-to-dismiss stage that the plaintiff adequately alleged interception of contents under the FSCA based on allegations that third-party pixels captured and transmitted substantive healthcare communications (e.g., health conditions, desired treatment, preferred doctors), and cited legislative intent to protect private medical information.
What the court did not decide: The court did not resolve factual issues about whether the tracking tools in fact intercepted and transmitted the plaintiff's communications on the merits, nor did it decide damages or final liability.
Cobbs v. PetMed Express, Inc.
What the court decided: The article reports that earlier Florida FSCA suits against website trackers were routinely dismissed for not targeting the "contents" of communications, but recent filings and decisions indicate a shift: some recent FSCA and federal Wiretap Act claims against websites and tracking technologies have survived motions to dismiss and new lawsuits have been filed alleging interception of URLs, queries, and personally identifiable information.
What the court did not decide: The article notes unresolved questions remain about the scope of "interception" and whether URLs, clicks, form inputs, and other web interactions qualify as the "contents" protected by wiretapping statutes, and whether privacy notices or cookie banners provide sufficient consent to defeat such claims.
Patrick J. Mika v. Rollins College
What the court decided: The court granted Defendant Rollins College's motion to dismiss the amended complaint, finding the amended complaint constituted a shotgun pleading and failed to state plausible claims on multiple counts. The amended complaint was dismissed without prejudice, and Plaintiff was granted leave to file a second amended complaint by April 10, 2026, subject to the limitations described in the order.
What the court did not decide: The court did not rule on the merits of Plaintiff's underlying substantive claims (Title IX, Rehabilitation Act, ADA, wiretap and state privacy claims, contract/tort claims) because dismissal was procedural for pleading deficiencies; the order did not resolve factual disputes or adjudicate the substantive liability of the defendant.
Sophin v. WISP, Inc.
This is the court-authorized settlement website for Sophin v. WISP, Inc., a class action pending in Broward County, Florida. The settlement resolves claims alleging that WISP disclosed customers' PII via the Meta Pixel and other tracking technologies and provides an $18.00 cash payment to eligible class members who purchased products on hellowisp.com between February 1, 2018 and September 9, 2025. Deadlines for claims, exclusion, and objections were July 13, 2026 and a Final Approval Hearing was scheduled for August 5, 2026.
What the court did not decide: The page states the Defendant denies the Plaintiff's claims and that the settlement was reached to avoid expense and uncertainty; it does not state that the court made any merits adjudication resolving the underlying allegations.
Technologies Appearing in Claims
- chatbots
- tracking pixels
- session replay tools
- website tracking tools
- chat widgets
- customer data platforms
- ad retargeting scripts
- website analytics
- tracking_pixels
- session_replay_tools
- website_tracking_tools
- online_forms
- pixel tracking (Meta Pixel)
- Google Analytics 4 (GA4)
- Floodlight
- third-party ad retargeting scripts
- third-party tracking scripts
- cookies
- third-party analytics
- social media pixels
- web beacons
- chat features
- tracking technologies
- analytics
- advertising technologies
Historical Risk Guideline
| Date | Risk Guideline | Level | Confidence | Tracked Lawsuits |
|---|---|---|---|---|
| August 12, 2026 | 57 | Elevated | 88% | 3 |
| August 15, 2026 | 57 | Elevated | 88% | 4 |
| August 16, 2026 | 57 | Elevated | 88% | 4 |
| August 19, 2026 | 62 | High | 88% | 5 |
| August 20, 2026 | 62 | High | 88% | 5 |
| August 21, 2026 | 62 | High | 88% | 5 |
| August 22, 2026 | 62 | High | 88% | 5 |
| August 23, 2026 | 52 | Elevated | 88% | 5 |
| August 23, 2026 | 52 | Elevated | 88% | 5 |
| August 24, 2026 | 52 | Elevated | 90% | 5 |
| August 26, 2026 | 52 | Elevated | 90% | 5 |
| August 30, 2026 | 52 | Elevated | 90% | 5 |
What Businesses Should Review
Businesses are advised to consider a technical review that inventories all client‑ and server‑side tracking (pixels, tag managers, analytics, session replay, chat widgets, CDPs, ad retargeting scripts, cookies, web beacons), maps where personally identifiable information and user inputs may flow, and assesses whether tracking implementations capture form fields, URLs, or other potentially sensitive values. Practical technical mitigations to evaluate include reducing or eliminating unnecessary third‑party scripts, implementing server‑side tag setups or reduced‑data client configurations, restricting data sent to analytics and ad vendors, deploying consent and granular control mechanisms for visitors, minimizing retention of tracked data, and tightening vendor contracts and logging/monitoring so that incident response and legal review can proceed efficiently. These technical reviews should be coordinated with in‑house or external counsel to align with evolving legal interpretations and business priorities.
Data Quality
34 source(s), 8 primary; evidence is fresh.
Methodology & Limitations
Statistics on this page are generated by the Crandall Consulting litigation intelligence engine. Publicly available sources (court and government materials, recognized legal press, professional analysis, and industry reports) are discovered through automated web research, classified into a tiered source hierarchy, and reduced to structured facts with full source provenance. Risk guidelines and evidence-confidence scores are computed by a deterministic formula from those stored facts — never by an AI model directly (AI explains findings; it never assigns a score). Counts labeled "tracked" reflect matters identified in our source set and are not official court statistics.
The overall risk guideline is composed of six deterministically weighted components: statutory structure (25%), current litigation activity (25%), prior precedent (18%), GPC / universal opt-out posture (15%), regulatory enforcement (9%), and the forward-looking 24-month horizon (8%). When a state's GPC status is limited data, that component is excluded and the remaining weights are renormalized — limited data never reads as lower exposure. Current litigation activity is measured over recent windows (velocity), not lifetime volume, so a jurisdiction with high historical activity but declining current filings reflects that decline. Litigation activity (volume) and precedential risk (authority of decisions) are measured separately. Full details are on the methodology page.
Sources
- Key Areas to Watch as Website Technology Litigation Continues to Surge
- Your Opt-Out Button Might Not Be Doing What You Think It Is
- The CIPA Playbook: Consent, Tracking, and What to Do If You Get a Demand Letter
- When a Website Becomes a Wiretap
- Planned Parenthood Sued Over Website Trackers That Allegedly Sent Patient Booking Data to Google
- When a Website Becomes a Wiretap
- KRISTIN COBBS; LYNNE KAWAMINAMI; LORETTA SCHWEINSBURG v. PETMED EXPRESS, INC. — Order Granting in Part and Denying in Part Motion to Dismiss
- U.S. Cybersecurity and Data Privacy Review and Outlook – 2025
- CIPA/ECPA Website-Tracking Privacy Litigation In 2026
- Website Tracking Litigation Emerges as One of the Fastest-Growing Consumer Class Action Threats Affecting Companies Across Industries
- Florida’s Digital Wiretapping Surge: What Businesses Need to Know About FSCA Litigation
- The US State Privacy Law Tracker for 2026: Twenty Laws, One Compliance Baseline
- ORDER (M.D. Fla. Mar. 11, 2026) - Patrick J. Mika v. Rollins College, Case No. 6:25-cv-1110-JSS-RMN
- Website Tracking, Data Breaches, and AI Class Actions: Managing Escalating Technology Litigation Risk
- Tips for Protecting Your Business from Wiretap Lawsuits Targeting Companies with Consumer-Facing Websites
- CLASS ACTION COMPLAINT (Woot) - Case 2:26-cv-01460 Document 1
- California SB 690 Spares Email Pixel Wiretap Suits
- Received a Florida FSCA Wiretapping Demand Letter? Read This First
- Class Action Review: A Brief Look at How Florida Courts Are Interpreting the Security of Communications Act in the Digital Age
- CHATBOTS AND WEBSITE TRACKING TECHNOLOGIES: CONSIDERATIONS UNDER FLORIDA’S SECURITY OF COMMUNICATIONS ACT
- Order — W.W. v. Orlando Health, Inc., No. 6:24-cv-01068 (M.D. Fla.)
- Sophin v. WISP, Inc.
- Florida Security of Communications Act (FSCA) - The Wiretapping Law
- Salpeter Gitkin Florida’s Data Privacy Litigation Over FSCA
- Report and Recommendations (Case No. 1:25-cv-22162-BB)
All State Pages
Is Your Website Creating Hidden Tracking Risk?
Scan your site for third-party tracking and potential wiretap exposure. Free, no account required.
Scan My Website