Texas AG Warns Businesses About CIPA Demand Letters: Why Ecommerce Companies Should Pay Attention

Texas AG Warns Businesses About CIPA Demand Letters

Ecommerce Innovation Alliance

October 5, 2026

The EIA has spent the past two years tracking the growing wave of litigation under the CIPA and fighting to curb this abuse, particularly claims targeting the routine website technologies ecommerce businesses use every day. Now, the issue is drawing attention well beyond California. On September 17, Texas Attorney General Ken Paxton issued a consumer alert warning Texas businesses and nonprofit organizations about a recent surge in demand letters alleging CIPA violations based on common website tools such as cookies, pixels, analytics platforms and search bars.…

READ FULL POST
California Governor Gavin Newsom Signs SB 690 providing Relief for Small Businesses Targeted by Abusive CIPA Lawsuits

Governor Newsom Signs SB 690: Real Relief for Small Businesses Targeted by Abusive CIPA Lawsuits

Ecommerce Innovation Alliance

October 1, 2026

Governor Gavin Newsom has now signed Senate Bill 690 into law. It's the first meaningful reform of the California Invasion of Privacy Act (CIPA) in decades, and a major win for the online businesses that have been hit with a wave of shakedown lawsuits and demand letters. When SB 690 cleared the Legislature in August, we said small businesses were one step closer to relief. Relief against abusive pen register and trap-and-trace claims is now the law of the land.…

READ FULL POST
California’s DROP Tool Is Now Live and It Changes the Data Landscape

California Closes a CCPA Deletion Gap: SB 923 Reaches Third-Party Data

Ecommerce Innovation Alliance

September 30, 2026

California is expanding one of the California Consumer Privacy Act’s core consumer rights. Gov Newsom has signed SBl 923, the Expanding Privacy Rights Act, which broadens the CCPA’s right to delete so that it generally applies to personal information a business has collected from or about a consumer — regardless of where that information originated. The new requirements take effect January 1, 2027. For ecommerce businesses, that could mean taking a closer look at customer information obtained through data enrichment, advertising and marketing partners, third-party data providers, and other outside sources.…

READ FULL POST
SB 690 Passes the Legislature: Small Businesses One Step Closer to Relief from Abusive CIPA Lawsuits

SB 690 Passes the Legislature: Small Businesses One Step Closer to Relief from Abusive CIPA Lawsuits

Ecommerce Innovation Alliance

August 29, 2026

August 28, both houses of the California Legislature passed Senate Bill 690, sending the first meaningful CIPA reform in decades to Governor Gavin Newsom's desk. The Assembly took up the bill on the floor and the Senate concurred in the Assembly's amendments the same day, clearing the final legislative hurdles with just days left before the Legislature adjourns on August 31.…

READ FULL POST
California’s DROP Tool Is Now Live and It Changes the Data Landscape

California Steps Up Data Broker Enforcement Under the CCPA and Delete Act

Ecommerce Innovation Alliance

August 25, 2026

California privacy regulators are sending an increasingly clear message to businesses across the digital advertising and ecommerce ecosystem: data broker compliance is becoming an active enforcement priority. In August, the California Privacy Protection Agency (CalPrivacy) announced two data broker enforcement actions in less than a week. One marked the Agency’s first action against a data broker under both the California Consumer Privacy Act and the Delete Act.…

READ FULL POST
Cobbs v PetMed dismissed by Florida court

Not All Website Users Are Equal: What “Cobbs v. PetMed Express” Means for Ecommerce

Ecommerce Innovation Alliance

August 24, 2026

A federal court in Florida has dismissed a closely watched privacy lawsuit involving website tracking technology after concluding that the named plaintiffs could not demonstrate the concrete privacy injury required to pursue their claims in federal court. In a July 31st order denying class certification and dismissing the amended complaint, the U.S. District Court for the Southern District of Florida found that neither remaining named plaintiff in Cobbs v. PetMed Express, Inc. had Article III standing. The court dismissed the amended complaint without prejudice for lack of jurisdiction.…

READ FULL POST
Next