California’s New Cybersecurity Audit Mandate: Why Ecommerce Businesses Need to Pay Attention Today
April 16, 2026
If your ecommerce business processes significant volumes of consumer data in California, a new regulation now on the books may soon require you to conduct — and formally certify — an annual cybersecurity audit. The requirement, finalized under the California Consumer Privacy Act (CCPA) and approved by the California Office of Administrative Law in September 2025, took effect on January 1, 2026, and represents one of the most prescriptive cybersecurity accountability measures any U.S. state has imposed to date.…
READ FULL POST
Just Days Left: Ecommerce Businesses Should Weigh In on California’s “Frictionless” Opt-Out Rules
March 30, 2026
The California Privacy Protection Agency (CPPA), referred to as “CalPrivacy”, is asking for input—and what comes next could directly impact how your business handles opt-outs and data rights. There are just a few days left for businesses around the U.S. to weigh in on a key California privacy issue that could shape future compliance requirements. Public comments must be submitted to CalPrivacy by April 8, 2026. …
READ FULL POST
CPPA Enforcement Sends a Clear Message: Friction in Privacy Opt-Outs Can Trigger Huge Fines
March 13, 2026
California is continuing to raise the bar on privacy compliance and their privacy regulators are making one thing clear: offering consumers the ability to opt out of data collection or sharing is not enough — those rights must be easy to exercise. In recent enforcement actions, the California Privacy Protection Agency (CPPA) fined companies including Ford Motor Company Disney and PlayOn Sports for privacy violations tied to how consumer rights were implemented. …
READ FULL POSTPost categories
- Industry News (5)
- Legal Update (18)
- Legislative Update (73)
- Organization News (5)
- Regulatory Update (60)
REcent Posts
Popular Tags
AI (15) Ecommerce Innovation Alliance (109) EIA (108) FCC (63) FCC petition (16) Federal Communications Commission (47) illegal calls (18) mini-TCPA (24) Notice of Proposed Rulemaking (17) quiet hours (22) robocalls (27) scam phone calls (22) shakedown litigation (21) SMS (30) sms marketing (51) spam calls (26) spam phone calls (19) TCPA (60) TCPA lawsuits (17) telemarketing laws (15) Telephone Consumer Protection Act (44) text messages (32) text messaging (26) text messaging laws (21) tracking technologies (17)