Ecommerce Businesses Should Weigh In on California’s CPPA CalPrivacy “Frictionless” Opt-Out Rules

Just Days Left: Ecommerce Businesses Should Weigh In on California’s “Frictionless” Opt-Out Rules

Ecommerce Innovation Alliance

March 30, 2026

The California Privacy Protection Agency (CPPA), referred to as “CalPrivacy”, is asking for input—and what comes next could directly impact how your business handles opt-outs and data rights. There are just a few days left for businesses around the U.S. to weigh in on a key California privacy issue that could shape future compliance requirements. Public comments must be submitted to CalPrivacy by April 8, 2026. …

READ FULL POST
California CPPA Enforcement Sends a Clear Message: Fines Ford Motor Company, PlayOn Sports and Disney for Friction in Privacy Opt-Outs

CPPA Enforcement Sends a Clear Message: Friction in Privacy Opt-Outs Can Trigger Huge Fines

Ecommerce Innovation Alliance

March 13, 2026

California is continuing to raise the bar on privacy compliance and their privacy regulators are making one thing clear: offering consumers the ability to opt out of data collection or sharing is not enough — those rights must be easy to exercise. In recent enforcement actions, the California Privacy Protection Agency (CPPA) fined companies including Ford Motor Company Disney and PlayOn Sports for privacy violations tied to how consumer rights were implemented. …

READ FULL POST
California’s DROP Tool Is Now Live and It Changes the Data Landscape

California’s DROP Tool Is Now Live and It Changes the Data Landscape

Ecommerce Innovation Alliance

February 23, 2026

California has launched a first-in-the-nation centralized data deletion privacy tool called the Delete Request and Opt-Out Platform(DROP). Developed by the California Privacy Protection Agency (CPPA), it is an online platform that allows Californians to submit a single request directing registered data brokers to delete their personal information and stop selling it. Starting August 1, 2026, data brokers must delete users data within 90 days of request.…

READ FULL POST
California’s SB 923: What Expanded Data Deletion Rights Could Mean for Ecommerce

California’s SB 923: What Expanded Data Deletion Rights Could Mean for Ecommerce

Ecommerce Innovation Alliance

February 3, 2026

California Senator Josh Becker has introduced Senate Bill 923 (SB 923), the Expanding Privacy Rights Act - a proposed update to the state’s privacy framework that would expand consumers’ data deletion rights and add new requirements for how privacy requests by consumers are submitted. While SB 923 is not yet law, it has already attracted attention because it is sponsored by the California Privacy Protection Agency (CPPA) and could receive serious consideration as the legislative process moves forward.…

READ FULL POST
CA Governor Newsom Signs California AB 566 California Opt Me Out Act mandating universal browser opt-out preference signals

CA Governor Newsom Signs the California Opt Me Out Act: Mandating Universal Browser Opt-Outs

Ecommerce Innovation Alliance

November 5, 2025

California Governor Gavin Newsom signed the California Opt Me Out Act (AB 566)  into law on October 8, 2025. As we previously reported, the Opt Me Out Act is a first-in-the-nation law requiring web browsers to include a built-in opt-out preference signal that lets consumers automatically tell websites not to sell or share their personal data.…

READ FULL POST
California AB 566 California Opt Me Out Act and universal browser opt-out preference signals

California’s AB 566: What Ecommerce Businesses Need to Know About Universal Opt-Out Signals

Ecommerce Innovation Alliance

September 18, 2025

California AB 566, known as the "California Opt Me Out Act," has recently cleared the state Legislature and is poised for Governor Newsom’s signature. This bill, if signed into law, will require internet browsers to integrate a consumer-configurable opt-out signal, fundamentally changing the landscape of data sharing and consumer privacy for businesses operating online. This signal will communicate a consumer's choice to opt out of the sale and sharing of their personal information to businesses they interact with through the browser.…

READ FULL POST
Next