The U.S. Court of Appeals for the Third Circuit has said Google’s “broad” and “surreptitious” practice of overriding cookie blockers to access users’ Internet history information raised serious concerns under California privacy laws, vacating a lower court’s dismissal of two claims in a class action lawsuit.

The court, meanwhile, upheld the dismissal of all other counts against Google, including claims under federal law that the company violated federal wiretap and computer fraud laws.