You've got mail: From a serial privacy plaintiff — A privacy pro's CIPA playbook
Contributors:
Alexander Proctor
AIGP, CIPP/E, CIPP/US, CIPM, CIPT, FIP
Chief Trust & Privacy Officer
Captain Compliance
Brought to you by Captain Compliance
Broadcast date: 10 Sept. 2026
Time: 08:00–09:00 PDT, 11:00–12:00 EDT, 17:00–18:00 CEST
What began as a wave of privacy class actions has settled into something more persistent. For several years now, a small number of serial plaintiffs have been sending thousands of templated demand letters under the California Invasion of Privacy Act, targeting businesses of every size over routine analytics and marketing tools.
For privacy professionals, the question is no longer whether these claims are viable in court. It's what to do when one lands in your inbox.
This session uses the campaign of one high-volume pro se plaintiff, Vivek Shah, recently declared a vexatious litigant by the Central District of California, as a window into the broader trend. We'll also break down how these claims are constructed, what the vexatious litigant ruling changes — and what it doesn't — and why demand letters are increasingly steering toward arbitration. If you've received a letter from a law firm like Swigart Law, you know exactly what we're talking about.
Attendees will leave with a practical framework for evaluating and responding to demand letters, which serial plaintiff law firms to watch out for, plus a prioritized remediation checklist showing how Captain Compliance can reduce tracking technology exposure before the letter ever arrives.
If you registered for this sponsored web conference and subsequent related follow-up emails, you submit your registration information to the IAPP and the co-host and sponsor for that particular web conference, which includes attendee names, titles, organizations, countries, state and email addresses.
This web conference is co-hosted and sponsored by Captain Compliance and free of charge to you. The IAPP and the sponsor will use your registration information each in compliance with its own privacy notices.
If you do not wish to submit your information to the web conference sponsor(s), you should not sign up for this free, live web conference. You can access the recording of the web conference without providing information to sponsors.
The co-sponsor's privacy notice is available here: Captain Compliance Privacy Notice
You may contact the sponsor directly in order to express your preferences with regard to direct marketing communication at heroes@captaincompliance.com
You may also contact the IAPP’s data privacy officer at privacy@iapp.org with any questions about the IAPP's processing of personal information or the IAPP's privacy notice.
Eligible CPEs: AIGP, CIPP/A, CIPP/C, CIPP/E, CIPP/US, CIPM and CIPT.
1.0 CPE credits
