Insurance
Home›Insurance›Industry & Deals›Privacy claims tied to tracking tech surge, doubling i…
Privacy claims tied to tracking tech surge, doubling in H1 2026
A key driver is rising use of the California Invasion of Privacy Act, with plaintiffs seeking $5,000 in statutory damages per alleged violation.
Insurance Journal republished analysis from Coalition arguing that privacy risk is evolving from a static compliance issue into something brokers should treat more like cyber risk. The analysis links the growth in claims to changes in legal theories, law firms, and claim tactics that vary by claimant type and jurisdiction.
The piece says the frequency of privacy rights-related insurance claims in the first half of 2026 has doubled versus 2025. It also cites that nearly three-quarters of web privacy claims referenced the California Invasion of Privacy Act, a 1967 wiretapping statute increasingly applied to common website tracking technologies such as pixels, cookies, and analytics scripts.
The analysis notes that CIPA claims often rely on arguments that tracking technologies “intercept” website communications without all-party consent, with each alleged violation carrying $5,000 in statutory damages. It adds that such claims can be asserted even against websites that used CCPA-required opt-out mechanisms.
Beyond California-based targeting, the article says CIPA can apply when a California resident interacts with a website, regardless of where the business is located. It further points to CIPA claims filed by Coalition policyholders in the UK and Australia this year, and to the rise of Vivek Shah as a prolific pro se filer of website privacy complaints.