$166B Tariff Refund Portal Launches: What Ecommerce Businesses Need to Know

$166B Tariff Refund Portal Launches: What Ecommerce Businesses Need to Know

Ecommerce Innovation Alliance

April 20, 2026

The long-anticipated next step in the tariff refund process is here. On Monday, April 20th, the Trump administration, in coordination with U.S. Customs and Border Protection (CBP), launched the Claims for Adjustment Portal for Entries (CAPE) refund portal. This opens the door to what could total up to $166 billion in tariff refunds tied to duties imposed under the International Emergency Economic Powers Act (IEEPA). For ecommerce businesses, this is a real opportunity to recover capital—but one that requires action and, in many cases, technical expertise.…

READ FULL POST
NYC’s ‘Click to Cancel’ Rule Signals a New Era of Subscription Regulation

NYC’s ‘Click to Cancel’ Rule Signals a New Era of Subscription Regulation

Ecommerce Innovation Alliance

April 17, 2026

Thanks to an initiative led by Mayor Mamdani, New York City appears poised to move forward with a first-in-the-nation municipal “click to cancel” rule. While it may sound like a local consumer protection effort, its implications could extend well beyond city limits. For ecommerce businesses, this is less about location and more about how you design subscription experiences and how regulators may begin enforcing them.…

READ FULL POST
California Consumer Privacy Act (CCPA) cybersecurity audit and risk assessment requirements in effect and Ecommerce Businesses Need to Pay Attention Today

California’s New Cybersecurity Audit Mandate: Why Ecommerce Businesses Need to Pay Attention Today

Ecommerce Innovation Alliance

April 16, 2026

If your ecommerce business processes significant volumes of consumer data in California, a new regulation now on the books may soon require you to conduct — and formally certify — an annual cybersecurity audit. The requirement, finalized under the California Consumer Privacy Act (CCPA) and approved by the California Office of Administrative Law in September 2025, took effect on January 1, 2026, and represents one of the most prescriptive cybersecurity accountability measures any U.S. state has imposed to date.…

READ FULL POST
Specialty Medical Inc. v. Mark Dobronski TCPA case

65 TCPA Lawsuits, One Destroyed Computer, and a Federal Judge Who Had Enough

Ecommerce Innovation Alliance

April 13, 2026

A Missouri federal court's devastating 26-page sanctions order in Human v. Fisher Investments offers a rare, detailed look at the predatory litigation model that has become a growing threat to legitimate businesses — including ecommerce merchants. Last week, Judge Matthew T. Schelp of the U.S. District Court for the Eastern District of Missouri issued one of the most striking TCPA sanctions orders in recent memory…

READ FULL POST
Minnesota Consumer Data Privacy Act (MCDPA) violations can trigger immediate enforcement risk for e-commerce businesses

Minnesota’s Privacy Law Moves Into Enforcement and Raises New Stakes for Businesses

Ecommerce Innovation Alliance

April 13, 2026

The Minnesota Consumer Data Privacy Act (MCDPA) has entered a new phase and for ecommerce businesses, the stakes just got higher. While the law took effect in July 2025, it included a provision requiring companies be given 30-day cure to fix compliance issues before facing enforcement by the state. The requirement to provide a grace period expired on January 31, 2026. Now, violations can trigger immediate enforcement risk.…

READ FULL POST
Rabbitt v. Rohrman - Is a Text Message a Call for TCPA and Do Not Call (DNC)

When Is a Text a “Call”? Courts Remain Split and Ecommerce Businesses Are Caught in the Middle

Ecommerce Innovation Alliance

April 10, 2026

The legal landscape around SMS marketing is becoming more complex and more consequential for ecommerce businesses. A recent Illinois federal court decision in Rabbitt v. Rohrman Midwest Motors adds new momentum to a growing divide among courts: whether a text message qualifies as a “call” under the Telephone Consumer Protection Act (TCPA). In Rabbitt v. Rohrman, the court concluded that it can. This brings SMS messages within the scope of the TCPA’s Do Not Call (DNC) rules.…

READ FULL POST
Next