California’s New Cybersecurity Audit Mandate: Why Ecommerce Businesses Need to Pay Attention Today
April 16, 2026
If your ecommerce business processes significant volumes of consumer data in California, a new regulation now on the books may soon require you to conduct — and formally certify — an annual cybersecurity audit. The requirement, finalized under the California Consumer Privacy Act (CCPA) and approved by the California Office of Administrative Law in September 2025, took effect on January 1, 2026, and represents one of the most prescriptive cybersecurity accountability measures any U.S. state has imposed to date.…
READ FULL POST
65 TCPA Lawsuits, One Destroyed Computer, and a Federal Judge Who Had Enough
April 13, 2026
A Missouri federal court's devastating 26-page sanctions order in Human v. Fisher Investments offers a rare, detailed look at the predatory litigation model that has become a growing threat to legitimate businesses — including ecommerce merchants. Last week, Judge Matthew T. Schelp of the U.S. District Court for the Eastern District of Missouri issued one of the most striking TCPA sanctions orders in recent memory…
READ FULL POST
Minnesota’s Privacy Law Moves Into Enforcement and Raises New Stakes for Businesses
April 13, 2026
The Minnesota Consumer Data Privacy Act (MCDPA) has entered a new phase and for ecommerce businesses, the stakes just got higher. While the law took effect in July 2025, it included a provision requiring companies be given 30-day cure to fix compliance issues before facing enforcement by the state. The requirement to provide a grace period expired on January 31, 2026. Now, violations can trigger immediate enforcement risk.…
READ FULL POST
When Is a Text a “Call”? Courts Remain Split and Ecommerce Businesses Are Caught in the Middle
April 10, 2026
The legal landscape around SMS marketing is becoming more complex and more consequential for ecommerce businesses. A recent Illinois federal court decision in Rabbitt v. Rohrman Midwest Motors adds new momentum to a growing divide among courts: whether a text message qualifies as a “call” under the Telephone Consumer Protection Act (TCPA). In Rabbitt v. Rohrman, the court concluded that it can. This brings SMS messages within the scope of the TCPA’s Do Not Call (DNC) rules.…
READ FULL POST
The FCC Just Proposed New Rules About Offshore Call Centers and Robocall Crackdowns — But Most of It Isn’t About You (Yet)
March 31, 2026
The FCC eleased two significant Notices of Proposed Rulemaking (NPRMs) on March 27, 2026, both adopted March 26, 2026. While neither is specifically directed at ecommerce companies, the proposals could carry real implications for how online retailers and direct-to-consumer brands will communicate with customers — and how the infrastructure underlying those communications is regulated. Here is a plain-language breakdown of what the FCC is proposing, what's still just a question being asked, and where ecommerce operators should pay close attention.…
READ FULL POSTPost categories
- Industry News (5)
- Legal Update (20)
- Legislative Update (77)
- Organization News (5)
- Regulatory Update (64)
REcent Posts
Popular Tags
Ecommerce Innovation Alliance (116) EIA (115) FCC (65) FCC petition (18) Federal Communications Commission (49) Frivolous Lawsuits (17) illegal calls (18) mini-TCPA (25) Notice of Proposed Rulemaking (18) nuisance calls (15) quiet hours (25) robocalls (27) scam phone calls (22) shakedown litigation (24) SMS (33) sms marketing (54) spam calls (27) spam phone calls (19) TCPA (63) TCPA lawsuits (18) Telephone Consumer Protection Act (47) text messages (35) text messaging (29) text messaging laws (22) tracking technologies (17)
NYC’s ‘Click to Cancel’ Rule Signals a New Era of Subscription Regulation
Ecommerce Innovation Alliance
April 17, 2026
Thanks to an initiative led by Mayor Mamdani, New York City appears poised to move forward with a first-in-the-nation municipal “click to cancel” rule. While it may sound like a local consumer protection effort, its implications could extend well beyond city limits. For ecommerce businesses, this is less about location and more about how you design subscription experiences and how regulators may begin enforcing them.…
READ FULL POST