House GOP Bills Put Federal Preemption of State Data Privacy Laws Back on the Table
May 12, 2026
A new set of data privacy proposals from U.S. House Republicans is doing more than restarting the federal privacy debate—it is putting forward a concrete legislative framework that could override state laws and reshape how ecommerce businesses manage customer data nationwide. This is one of the most substantive federal privacy efforts in recent years—and one that directly intersects with long-standing concerns about regulatory fragmentation.…
READ FULL POST
NYC’s ‘Click to Cancel’ Rule Signals a New Era of Subscription Regulation
April 17, 2026
Thanks to an initiative led by Mayor Mamdani, New York City appears poised to move forward with a first-in-the-nation municipal “click to cancel” rule. While it may sound like a local consumer protection effort, its implications could extend well beyond city limits. For ecommerce businesses, this is less about location and more about how you design subscription experiences and how regulators may begin enforcing them.…
READ FULL POST
California’s New Cybersecurity Audit Mandate: Why Ecommerce Businesses Need to Pay Attention Today
April 16, 2026
If your ecommerce business processes significant volumes of consumer data in California, a new regulation now on the books may soon require you to conduct — and formally certify — an annual cybersecurity audit. The requirement, finalized under the California Consumer Privacy Act (CCPA) and approved by the California Office of Administrative Law in September 2025, took effect on January 1, 2026, and represents one of the most prescriptive cybersecurity accountability measures any U.S. state has imposed to date.…
READ FULL POST
Minnesota’s Privacy Law Moves Into Enforcement and Raises New Stakes for Businesses
April 13, 2026
The Minnesota Consumer Data Privacy Act (MCDPA) has entered a new phase and for ecommerce businesses, the stakes just got higher. While the law took effect in July 2025, it included a provision requiring companies be given 30-day cure to fix compliance issues before facing enforcement by the state. The requirement to provide a grace period expired on January 31, 2026. Now, violations can trigger immediate enforcement risk.…
READ FULL POSTPost categories
- Industry News (5)
- Legal Update (20)
- Legislative Update (77)
- Organization News (5)
- Regulatory Update (64)
REcent Posts
Popular Tags
Ecommerce Innovation Alliance (116) EIA (115) FCC (65) FCC petition (18) Federal Communications Commission (49) Frivolous Lawsuits (17) illegal calls (18) mini-TCPA (25) Notice of Proposed Rulemaking (18) nuisance calls (15) quiet hours (25) robocalls (27) scam phone calls (22) shakedown litigation (24) SMS (33) sms marketing (54) spam calls (27) spam phone calls (19) TCPA (63) TCPA lawsuits (18) Telephone Consumer Protection Act (47) text messages (35) text messaging (29) text messaging laws (22) tracking technologies (17)
In-Depth, Updated: The New Wave of Quiet Hours Litigation Is Bigger Than We Originally Understood
Ecommerce Innovation Alliance
May 14, 2026
An update to our earlier reporting, "A New Firm Joins the Quiet Hours Gold Rush." After our earlier piece on Faythe Gutierrez and PLG Damage Attorneys, PLLC ran, we received a tip that our reporting was incomplete: other attorneys at the same firm have been filing a parallel wave of quiet-hours cases in Florida federal court, and our initial search hadn’t surfaced them. The tip checks out. …
READ FULL POST