Recent research reveals that many websites secretly intercept users’ keystrokes, often even before form submission, raising legal and privacy concerns. The study indicates widespread use of third-party scripts capable of capturing sensitive information, which could be interpreted as wiretapping under California law. #WebTracking #WiretappingLaw
Keypoints
- A significant percentage of websites use event listeners that can capture user keystrokes in real time.
- Approximately 38.5% of tested websites had third-party scripts capable of intercepting keystrokes.
- Data such as email addresses, phone numbers, and sensitive user inputs can be transmitted to remote servers without user submission.
- The study suggests that such practices might legally qualify as wiretapping under California’s CIPA law.
- Privacy risks increase when users are unaware their private information is being silently collected and shared.
Read More: https://www.helpnetsecurity.com/2025/09/11/website-keystroke-tracking-privacy/