SENATE BILL 690 AMENDED: California Scales Back Its Proposed CIPA Overhaul by Eliminating the “Commercial Business Purpose” Exemption—Here’s What the Latest Means for CIPA Litigation - The National Law Review
California Senate Bill 690 has been amended to remove the 'commercial business purpose' exemption from the California Invasion of Privacy Act (CIPA), expanding liability for businesses that collect or use data for commercial purposes. This change increases litigation risk for companies previously exempt under that provision.
Aforeworn detected this change in the US State Data-Privacy Laws space on July 6, 2026 and published this briefing so affected operators are forewarned rather than caught off guard. It is rated High urgency. Multistate retailers, adtech/data brokers, SaaS platforms, and any business collecting data in California for commercial purposes. should confirm how it applies to their specific situation before acting. There is a time constraint attached: Immediately; the amendment is effective upon enactment (likely soon).. Acting after that point can mean penalties, a lapsed licence, or lost eligibility — exactly the kind of surprise Aforeworn exists to prevent. Aforeworn monitors US State Data-Privacy Laws continuously and turns every detected change into a plain-English briefing like this one, so you always know first. Forewarned is forearmed.
What changed
The 'commercial business purpose' exemption under CIPA has been eliminated, meaning businesses that collect or use data for commercial reasons are no longer shielded from CIPA claims, including those related to wiretapping and recording.
Who it affects
Multistate retailers, adtech/data brokers, SaaS platforms, and any business collecting data in California for commercial purposes.
What you must do
Review data collection practices, especially any use of session replay, chat monitoring, or other recording technologies, and ensure compliance with CIPA's consent requirements.
Deadline
Immediately; the amendment is effective upon enactment (likely soon).
Never miss a change like this again
Aforeworn watches US State Data-Privacy Laws around the clock and alerts you the moment a rule moves — with a plain-English brief on what to do.
Start your free trialRelated changes in US State Data-Privacy Laws
- From Data Brokers to DNA: Connecticut Enacts Sweeping Privacy Amendments - The National Law Review
- Connecticut Data Privacy Law 2026: LLM Training Disclosure Mandate Takes Effect Tuesday - Tech Times
- CPI | Vermont Privacy Law Raises Compliance Bar, Starting in 2028 - PYMNTS.com
- Netchoice, LLC v. Bonta
- Client Alert: California Invasion of Privacy Act Reform Gains Momentum: Legislature Advances Bill That Could Significantly Curtail Website Tracking Litigation - JD Supra