Social media users may have a reasonable expectation of privacy in their internet browsing data, according to a recent decision of the United States Court of Appeals for the Ninth Circuit Court.

Users of a social media platform brought a class action against its owner, alleging that the company tracked users’ browsing histories when they visited third-party websites, and then compiled those browsing histories into personal profiles which were sold to advertisers to generate revenue. The company did not dispute that it engaged in these tracking practices even after its users had logged out of the site. Plaintiffs complaint alleged, among other claims, violation of the California Invasion of Privacy Act (“CIPA”), and common law invasion of privacy.