United Against CIPA Shakedown Lawsuits: EIA Continues Advocacy in Support of California Senate Bill 690

United Against CIPA Shakedowns: EIA Continues Advocacy in Support of California SB 690

Ecommerce Innovation Alliance

March 20, 2026

At the Ecommerce Innovation Alliance (EIA), we believe that business owners should be able to use standard, modern technology to serve their customers without living in fear of predatory lawsuits. Unfortunately, in California, a 1960s-era privacy law is being twisted into a tool for legal "shakedowns" that target legitimate ecommerce brands. …

READ FULL POST
CA Governor Newsom Signs California AB 566 California Opt Me Out Act mandating universal browser opt-out preference signals

CA Governor Newsom Signs the California Opt Me Out Act: Mandating Universal Browser Opt-Outs

Ecommerce Innovation Alliance

November 5, 2025

California Governor Gavin Newsom signed the California Opt Me Out Act (AB 566)  into law on October 8, 2025. As we previously reported, the Opt Me Out Act is a first-in-the-nation law requiring web browsers to include a built-in opt-out preference signal that lets consumers automatically tell websites not to sell or share their personal data.…

READ FULL POST
California AB 566 California Opt Me Out Act and universal browser opt-out preference signals

California’s AB 566: What Ecommerce Businesses Need to Know About Universal Opt-Out Signals

Ecommerce Innovation Alliance

September 18, 2025

California AB 566, known as the "California Opt Me Out Act," has recently cleared the state Legislature and is poised for Governor Newsom’s signature. This bill, if signed into law, will require internet browsers to integrate a consumer-configurable opt-out signal, fundamentally changing the landscape of data sharing and consumer privacy for businesses operating online. This signal will communicate a consumer's choice to opt out of the sale and sharing of their personal information to businesses they interact with through the browser.…

READ FULL POST
Multi-State Privacy Sweep Targets Ecommerce Brands on Global Privacy Control Compliance

Multi-State Privacy Sweep Targets Ecommerce Brands on Global Privacy Control Compliance

Ecommerce Innovation Alliance

September 17, 2025

Last week, California Attorney General Rob Bonta, alongside the California Privacy Protection Agency (CPPA) and the Attorneys General of Colorado and Connecticut, announced a joint investigative sweep focused on enforcing consumers' right to opt out of the sale and sharing of their personal information. This joint investigative sweep targets businesses that may be failing to honor consumer requests to opt out of the sale of personal information. A central focus of this initiative is compliance with the Global Privacy Control (GPC).…

READ FULL POST
EIA Files Comments over Proposed Changes to the New Jersey Data Protection Act that Could Impact Ecommerce Brands Nationwide

EIA Files Comments over Proposed Changes to the New Jersey Data Protection Act that Could Impact Ecommerce Brands Nationwide

Ecommerce Innovation Alliance

August 4, 2025

The EIA has submitted our comprehensive comments on proposed New Jersey privacy rules. As we highlighted previously, the proposed new privacy regulations, released on June 2, 2025, appear to go "significantly beyond" the existing NJDPA and introduce requirements that diverge substantially from other comprehensive state privacy laws. Our comments emphasize that these proposed rules raise significant concerns for ecommerce brands nationwide, particularly for smaller businesses operating across state lines.…

READ FULL POST
Senate Bill 332, New Jersey Data Protection Act (NJDPA)

Why New Jersey’s New Privacy Rules Should Worry Ecommerce Brands Nationwide

Ecommerce Innovation Alliance

July 25, 2025

EIA is issuing an alert about significant new privacy regulations proposed by New Jersey that could impact ecommerce businesses across the US. On June 2nd the New Jersey Office of Consumer Protection released new proposed privacy and compliance regulations that go significantly beyond the existing New Jersey Data Privacy Act (NJDPA) that is already in effect. These compliance regulations, if adopted, will apply to every business that operates in OR targets New Jersey residents.…

READ FULL POST
Next