Understanding Website Privacy Demand Letters

What’s happening. A number of businesses—across many industries, not just staffing and recruiting—have been receiving demand letters alleging that their websites use tracking technologies (e.g., analytics, advertising pixels, and similar tools) in ways that don’t comply with privacy laws such as California’s Invasion of Privacy Act (CIPA). These letters are frequently sent in volume by the same individuals. If you’ve received one, you are not alone, and it does not mean you’ve been singled out.

The most important step. These are legal matters. The single most important thing you can do is share the letter with an attorney experienced in privacy law before responding to it. We are a marketing and website services provider, not a law firm—we can’t assess the claim, tell you whether you’re compliant, or advise on how to respond. An experienced privacy attorney will be familiar with these letters and can advise you on the right path. Please don’t respond to the sender yourself before your attorney has reviewed it; a self-drafted response can sometimes make things more complicated.

What we can help with:

• Provide a dated, factual snapshot of how your website is currently configured—the tracking tools present and how the consent setup behaves—for your attorney’s review.
• Implement technical changes your attorney recommends.
• Account for tools you or another vendor may have added outside of our platform (for example, advertising or sales pixels installed through your own accounts)—just let us know what’s in use.

About your site’s consent setup:

We have rolled out a consent mechanism across the websites we host, designed so that tracking tags deployed through our platform respect a visitor’s choice. Please note that tools added to your site outside of our platform—through your own advertising, analytics, or sales accounts—may operate independently of this setup. If you’re unsure what’s running on your site, we’re glad to help you review it.

What to do if you’ve received a letter:

1. Don’t ignore it, and don’t respond to the sender before consulting an attorney.
2. Share it with privacy counsel.
3. Preserve your site’s current configuration—avoid making changes until your attorney advises, so there’s an accurate record.
4. Let us know, and we’ll support you and your counsel on the technical side.

This information is general and is not legal advice. Questions about how the law applies to your business should be directed to your attorney.