California Closes a CCPA Deletion Gap: SB 923 Reaches Third-Party Data
September 30, 2026
California is expanding one of the California Consumer Privacy Act’s core consumer rights. Gov Newsom has signed SBl 923, the Expanding Privacy Rights Act, which broadens the CCPA’s right to delete so that it generally applies to personal information a business has collected from or about a consumer — regardless of where that information originated. The new requirements take effect January 1, 2027. For ecommerce businesses, that could mean taking a closer look at customer information obtained through data enrichment, advertising and marketing partners, third-party data providers, and other outside sources.…
READ FULL POST
California Steps Up Data Broker Enforcement Under the CCPA and Delete Act
August 25, 2026
California privacy regulators are sending an increasingly clear message to businesses across the digital advertising and ecommerce ecosystem: data broker compliance is becoming an active enforcement priority. In August, the California Privacy Protection Agency (CalPrivacy) announced two data broker enforcement actions in less than a week. One marked the Agency’s first action against a data broker under both the California Consumer Privacy Act and the Delete Act.…
READ FULL POST
US Senator Wyden Calls for Coordinated State Enforcement of Global Privacy Control Signals
August 20, 2026
As more states give consumers the ability to automatically opt out of certain uses of their personal information, Senator Ron Wyden (D-Ore.) is urging state regulators to take a more coordinated approach to enforcing those rights. In an August 3rd letter to attorneys general and privacy regulators in 11 states, Senator Wyden called for clearer guidance and collective enforcement around Global Privacy Control, a technology that allows consumers to communicate an opt-out preference automatically through their browser rather than submitting individual requests to every website they visit.…
READ FULL POST
House GOP Bills Put Federal Preemption of State Data Privacy Laws Back on the Table
May 12, 2026
A new set of data privacy proposals from U.S. House Republicans is doing more than restarting the federal privacy debate—it is putting forward a concrete legislative framework that could override state laws and reshape how ecommerce businesses manage customer data nationwide. This is one of the most substantive federal privacy efforts in recent years—and one that directly intersects with long-standing concerns about regulatory fragmentation.…
READ FULL POST
California’s New Cybersecurity Audit Mandate: Why Ecommerce Businesses Need to Pay Attention Today
April 16, 2026
If your ecommerce business processes significant volumes of consumer data in California, a new regulation now on the books may soon require you to conduct — and formally certify — an annual cybersecurity audit. The requirement, finalized under the California Consumer Privacy Act (CCPA) and approved by the California Office of Administrative Law in September 2025, took effect on January 1, 2026, and represents one of the most prescriptive cybersecurity accountability measures any U.S. state has imposed to date.…
READ FULL POST
Minnesota’s Privacy Law Moves Into Enforcement and Raises New Stakes for Businesses
April 13, 2026
The Minnesota Consumer Data Privacy Act (MCDPA) has entered a new phase and for ecommerce businesses, the stakes just got higher. While the law took effect in July 2025, it included a provision requiring companies be given 30-day cure to fix compliance issues before facing enforcement by the state. The requirement to provide a grace period expired on January 31, 2026. Now, violations can trigger immediate enforcement risk.…
READ FULL POSTPost categories
- Industry News (11)
- Legal Update (28)
- Legislative Update (99)
- Organization News (6)
- Regulatory Update (77)
REcent Posts
Popular Tags
California Consumer Privacy Act (22) California Privacy Protection Agency (22) CCPA (21) CPPA (22) Ecommerce Innovation Alliance (151) EIA (150) FCC (78) Federal Communications Commission (61) mini-TCPA (27) quiet hours (31) robocalls (33) scam phone calls (26) shakedown litigation (30) SMS (39) sms marketing (67) spam calls (32) spam phone calls (22) TCPA (77) TCPA lawsuits (24) telemarketing laws (24) Telephone Consumer Protection Act (59) text messages (43) text messaging (35) text messaging laws (24) tracking technologies (27)