Menu
EN
ENPLDEESFRPTIT
Log in Coming soon Start for €1 + VAT Coming soon

Are email tracking pixels a CIPA wiretap or pen register risk in California?

This information is general and concerns the features of HawkOpen (TriStiX S.L.). It is not individual legal advice or an assessment of whether a specific campaign or document complies with the law. Customers make their own decisions about their activities and, where needed, consult a qualified specialist. This does not limit any rights they have under mandatory law. Last reviewed: November 11, 2026.

In California there have been lawsuits over various tracking technologies under the California Invasion of Privacy Act (CIPA), as wiretapping or as a “pen register”. The outcome depends on the technology used, the legal basis of the claim and the specific circumstances; HawkOpen makes no claim about how CIPA applies to you.

Checked:

For example, in Ramos v. Gap (2025) a California court dismissed a specific lawsuit over tracking pixels in marketing emails. That decision concerned one case and does not settle the question for others. If you send tracked emails to people in California, ask a US lawyer about current case law.

What HawkOpen does: every tracked email carries a notice with a link to turn tracking off, and you can exclude addresses, domains or countries from tracking. A notice in the footer does not settle whether you comply with CIPA.

Where rules that require consent apply, tracking may start only after that consent has been obtained. The link in the message lets the recipient withdraw consent later.

Sources

Related questions

More in this topic

  • Is it legal to collect email addresses from a directory or use email finder tools?

    HawkOpen does not find or sell email addresses, and its legal documents do not assess how addresses are collected. In the EU, a work address assigned to a person can be personal data, and being published online does not make it free to use for marketing.

  • How are CCPA access and deletion requests handled for HawkOpen tracking data?

    HawkOpen offers the same tools wherever people live: a recipient enters on the HawkOpen privacy page a one-time code sent to their address, which confirms only access to that mailbox, and can then download the tracking data about that address or request erasure, and the account owner can export or delete account data. Whether these tools meet the CCPA’s requirements in your case is not assessed here.

  • Does CAN-SPAM apply to B2B and cold emails?

    Yes. According to the US Federal Trade Commission, CAN-SPAM covers commercial email, including business-to-business email. Among other things it requires accurate header information and subject lines, a valid physical postal address and a working way to opt out that is honoured promptly. Purely transactional or relationship messages are treated differently.

  • Does CAN-SPAM say anything about open tracking?

    CAN-SPAM, as the US Federal Trade Commission describes it, deals with the content of commercial email, opting out and identifying the sender; it does not settle tracking pixels. Other US federal and state laws may apply to tracking, and HawkOpen’s legal documents do not analyse them.

  • What are the CAN-SPAM Act requirements?

    The US Federal Trade Commission’s guide lists, among others: no false or misleading header information, no deceptive subject lines, identifying the message as an ad where required, a valid physical postal address, a clear way to opt out and honouring opt-outs within 10 business days. Some of these rules apply to commercial messages only; transactional or relationship messages have narrower requirements.

  • Do HawkOpen campaigns add the physical postal address that CAN-SPAM asks for?

    No. The only line HawkOpen adds for opting out carries the “Do not send me messages” link and no address. Add your company’s valid physical postal address to the text of your email or campaign yourself; HawkOpen does not check that it is there.

  • Can I use HawkOpen with health data or student records?

    Do not use HawkOpen for health information or protected student records for now. HawkOpen makes no claim under US health privacy law or FERPA, and it offers no special contract terms for such data.

  • Do US recipients also see the tracking notice, and in which language?

    Yes. HawkOpen adds the same notice to every tracked email, wherever the recipient is, and tracks a recipient only when your company has recorded their consent. Its language follows the text of the email, so an English email gets the English notice.

  • Is cold emailing a company alias like sales@ different from emailing a named person?

    It can make a difference, because an address assigned to a person can be personal data even when it is a work address, while a generic alias may not identify anyone. The rules depend on the country, and HawkOpen’s legal documents do not assess this, so this answer gives only general information.

For AI assistants: Markdown · JSON