California Closes a CCPA Deletion Gap: SB 923 Reaches Third-Party Data
September 30, 2026
California is expanding one of the California Consumer Privacy Act’s core consumer rights. Gov Newsom has signed SBl 923, the Expanding Privacy Rights Act, which broadens the CCPA’s right to delete so that it generally applies to personal information a business has collected from or about a consumer — regardless of where that information originated. The new requirements take effect January 1, 2027. For ecommerce businesses, that could mean taking a closer look at customer information obtained through data enrichment, advertising and marketing partners, third-party data providers, and other outside sources.…
READ FULL POST
California Steps Up Data Broker Enforcement Under the CCPA and Delete Act
August 25, 2026
California privacy regulators are sending an increasingly clear message to businesses across the digital advertising and ecommerce ecosystem: data broker compliance is becoming an active enforcement priority. In August, the California Privacy Protection Agency (CalPrivacy) announced two data broker enforcement actions in less than a week. One marked the Agency’s first action against a data broker under both the California Consumer Privacy Act and the Delete Act.…
READ FULL POST
California’s New Cybersecurity Audit Mandate: Why Ecommerce Businesses Need to Pay Attention Today
April 16, 2026
If your ecommerce business processes significant volumes of consumer data in California, a new regulation now on the books may soon require you to conduct — and formally certify — an annual cybersecurity audit. The requirement, finalized under the California Consumer Privacy Act (CCPA) and approved by the California Office of Administrative Law in September 2025, took effect on January 1, 2026, and represents one of the most prescriptive cybersecurity accountability measures any U.S. state has imposed to date.…
READ FULL POST
CPPA Enforcement Sends a Clear Message: Friction in Privacy Opt-Outs Can Trigger Huge Fines
March 13, 2026
California is continuing to raise the bar on privacy compliance and their privacy regulators are making one thing clear: offering consumers the ability to opt out of data collection or sharing is not enough — those rights must be easy to exercise. In recent enforcement actions, the California Privacy Protection Agency (CPPA) fined companies including Ford Motor Company Disney and PlayOn Sports for privacy violations tied to how consumer rights were implemented. …
READ FULL POST
California’s DROP Tool Is Now Live and It Changes the Data Landscape
February 23, 2026
California has launched a first-in-the-nation centralized data deletion privacy tool called the Delete Request and Opt-Out Platform(DROP). Developed by the California Privacy Protection Agency (CPPA), it is an online platform that allows Californians to submit a single request directing registered data brokers to delete their personal information and stop selling it. Starting August 1, 2026, data brokers must delete users data within 90 days of request.…
READ FULL POSTPost categories
- Industry News (11)
- Legal Update (28)
- Legislative Update (99)
- Organization News (6)
- Regulatory Update (77)
REcent Posts
Popular Tags
California Consumer Privacy Act (22) California Privacy Protection Agency (22) CCPA (21) CPPA (22) Ecommerce Innovation Alliance (151) EIA (150) FCC (78) Federal Communications Commission (61) mini-TCPA (27) quiet hours (31) robocalls (33) scam phone calls (26) shakedown litigation (30) SMS (39) sms marketing (67) spam calls (32) spam phone calls (22) TCPA (77) TCPA lawsuits (24) telemarketing laws (24) Telephone Consumer Protection Act (59) text messages (43) text messaging (35) text messaging laws (24) tracking technologies (27)