If you read the text of SB690, it isn't just excluding IP addresses and session cookies which would be a valid change in the law in my opinion. https://legiscan.com/CA/text/SB690/id/3186917

Instead, it is allowing wiretapping for a "commercial business purpose", basically anything a company can do to make money like sell your private data to a data broker or the government.

Proponents argue that CIPA is not necessary because we have the California Consumer Privacy Act (CCPA) protecting us, but the CCPA is only opt out and you can't opt out of every company or surveillance you don't know about. The current CIPA is opt in where you have to consent to your communications being wiretapped, so SB690 would change the status quo from requiring companies to get your consent to record your communications to you having to opt out of every possible company.

https://www.eff.org/deeplinks/2025/06/californias-corporate-...