u/Individual_Ikri7683

We run an ecommerce site that serves California customers and last week we got a demand letter citing CIPA section 631(a). They're claiming our Meta Pixel is unauthorized wiretapping because it captures browsing behavior in real time. They want $5,000 per violation, $150,000 total.

We have a privacy policy and a cookie banner, but apparently the banner doesn't actually work and they're calling it a deceptive pattern. So I guess that's not enough? Ughhh. The letter comes from a real law firm which is what's making me take it seriously.

Before we respond I want to understand whether this is a legitimate legal theory or if they're just fishing. Has anyone dealt with this before? How much did you pay to make it go away?