About this event
A handful of plaintiff firms are sending thousands of CIPA demand letters to businesses whose websites use everyday marketing tools — analytics, chat widgets, ad pixels. Individual settlements typically run $15K–$30K, and defending a claim in court can cost $160K–$200K even when you’ve done nothing wrong.
California’s newly signed SB 690 closes one door for private plaintiffs, but wiretapping claims remain fully live, and they don’t require proof of any actual harm. The uncomfortable truth: most companies being targeted believed they were compliant. They had a consent banner. But cookies were still firing before consent, deny buttons weren’t executing, and nobody had verified what tracking technology was actually running on the site.
In this panel discussion, Alexandra Samofalova, attorney at Spencer Fane LLP, and Max Lucas, founder of DWC, explain CIPA in plain English, break down how these lawsuits work, why fixes like IP geo-fencing fall short, and what reduces your risk — plus what to do in the first days after a demand letter lands.
In this webinar, you can learn:
Register today to secure your seat for free, and bring your questions to this live webinar!
Hosted by
Alexandra Samofalova is an attorney at Spencer Fane LLP, where she counsels businesses on privacy, data security, and emerging-technology risk. Her practice centers on helping companies navigate the fast- moving landscape of U.S. privacy law and compliance — including the surge of lawsuits under the California Invasion of Privacy Act (CIPA) that target website technologies such as cookies, advertising pixels, session-replay tools, and chat widgets. Alexandra advises clients on building defensible consent and cookie-management programs, evaluating the privacy risk of marketing and analytics technology before it goes live, and responding to CIPA demands and enforcement actions. She works closely with marketing teams, digital agencies, and in-house counsel to reconcile ambitious marketing goals with the very real litigation exposure these tools can create — translating complex privacy rules into practical, business-focused guidance.
Max Lucas is Managing Director of DWC, a professional services agency specializing in privacy technology and digital measurement. From its base in Germany, DWC helps organizations design, implement, and operate consent and tracking setups that hold up to regulatory scrutiny without sacrificing the data their marketing and analytics teams depend on. Max has worked with consent management platforms (CMPs) since 2018, when the GDPR made cookie consent a core compliance requirement rather than an afterthought. Since 2020, he has extended that expertise to the fast-moving U.S. privacy landscape, including the CCPA/CPRA, the growing patchwork of comprehensive state privacy laws, and the technical realities behind the wave of website-tracking litigation.
Usercentrics is a leading Consent Management Platform (CMP) that empowers companies to obtain, manage, and document user consent for full privacy compliance and trust-building.
