Federal Judge Lets CNN Privacy Lawsuit Over Adtech Tracking Move Forward
A federal judge ruled CNN must face a class action over alleged unauthorized user data sharing.
Why it matters: Media companies face intensifying legal scrutiny over online tracking and third-party data sharing. The outcome of this case could set precedents for compliance with privacy laws like the California Invasion of Privacy Act (CIPA) and reshape digital advertising practices.
- On April 9, 2026, Judge Victor Marrero denied CNN’s motion to dismiss the CIPA class action.
- The suit claims CNN embedded Microsoft, PubMatic, and OpenX trackers that collected user data.
- Data allegedly included IP addresses and device IDs shared without consent for targeted ads.
- The court found claims plausible that these tools acted as unlawful pen registers under California law.
CNN must defend itself against a proposed class action alleging it violated the California Invasion of Privacy Act (CIPA) by allowing tracking code from Microsoft, PubMatic, and OpenX on its website.
- Lead plaintiff Anthony D’Antonio claims these trackers harvested website users’ IP addresses and device identifiers without their consent, sharing the data with adtech companies to assemble user profiles for targeted advertising.
- On April 9, 2026, Judge Victor Marrero concluded that D’Antonio "adequately pleaded a claim under California Invasion of Privacy Act’s pen-register provisions," establishing standing and moving the case past CNN’s motion to dismiss.
- CNN argued the suit lacked concrete injury and the tracking tools did not qualify as pen registers under CIPA, since they allegedly recorded communication content.
- The court rejected these arguments for now, allowing the litigation to proceed to discovery and reserving CNN’s provider-exemption defense for a later stage.
This lawsuit is one of several recent class actions testing how far state privacy statutes reach into modern online advertising practices—issues of active interest to legal and compliance teams navigating the fast-evolving regulatory landscape.
Details about the full scope of CNN’s data collection, the affected class size, and total damages sought remain unknown. Still, with CIPA imposing up to $5,000 in statutory damages per violation, the case could have costly implications for digital publishers relying on third-party tracking tools.
By the numbers:
- April 9, 2026 — Date Judge Marrero denied CNN’s dismissal motion
- $5,000 — Statutory damages per CIPA violation
Yes, but: Specifics of data sharing practices and the class size are not yet disclosed, leaving the potential impact uncertain.
What's next: Discovery will explore factual questions around CNN’s use of tracking tools and possible exemptions.