California’s New Cybersecurity Audit Mandate: Why Ecommerce Businesses Need to Pay Attention Today
April 16, 2026
If your ecommerce business processes significant volumes of consumer data in California, a new regulation now on the books may soon require you to conduct — and formally certify — an annual cybersecurity audit. The requirement, finalized under the California Consumer Privacy Act (CCPA) and approved by the California Office of Administrative Law in September 2025, took effect on January 1, 2026, and represents one of the most prescriptive cybersecurity accountability measures any U.S. state has imposed to date.…
READ FULL POST
United Against CIPA Shakedowns: EIA Continues Advocacy in Support of California SB 690
March 20, 2026
At the Ecommerce Innovation Alliance (EIA), we believe that business owners should be able to use standard, modern technology to serve their customers without living in fear of predatory lawsuits. Unfortunately, in California, a 1960s-era privacy law is being twisted into a tool for legal "shakedowns" that target legitimate ecommerce brands. …
READ FULL POSTPost categories
- Industry News (5)
- Legal Update (20)
- Legislative Update (78)
- Organization News (5)
- Regulatory Update (64)
REcent Posts
Popular Tags
Ecommerce Innovation Alliance (117) EIA (116) FCC (65) FCC petition (18) Federal Communications Commission (49) Frivolous Lawsuits (17) illegal calls (18) mini-TCPA (25) Notice of Proposed Rulemaking (18) quiet hours (25) robocalls (27) scam phone calls (22) shakedown litigation (24) SMS (33) sms marketing (54) spam calls (27) spam phone calls (19) tariffs (16) TCPA (63) TCPA lawsuits (18) Telephone Consumer Protection Act (47) text messages (35) text messaging (29) text messaging laws (22) tracking technologies (17)
In-Depth, Updated: The New Wave of Quiet Hours Litigation Is Bigger Than We Originally Understood
May 14, 2026