Update: FCC Adopts Exclusive Opt-Out Rule, a Major Step Against "Opt-Out Evader" Litigation

Update: FCC Adopts Exclusive Opt-Out Rule, a Major Step Against “Opt-Out Evader” Litigation

Ecommerce Innovation Alliance

October 1, 2026

At its September 30th Open Meeting, the Federal Communications Commission adopted the TCPA consent revocation reforms we previewed in our September 11 post, "FCC Set to Adopt TCPA Revocation Reforms Championed by EIA at Its September 30 Open Meeting", including a change EIA has long pushed for: businesses can now designate an exclusive method for consumers to opt out. All three current Commissioners voted for the Report and Order and Further Notice of Proposed Rulemaking (FCC 26-67, CG Docket No. 02-278).  …

READ FULL POST
California’s DROP Tool Is Now Live and It Changes the Data Landscape

California Closes a CCPA Deletion Gap: SB 923 Reaches Third-Party Data

Ecommerce Innovation Alliance

September 30, 2026

California is expanding one of the California Consumer Privacy Act’s core consumer rights. Gov Newsom has signed SBl 923, the Expanding Privacy Rights Act, which broadens the CCPA’s right to delete so that it generally applies to personal information a business has collected from or about a consumer — regardless of where that information originated. The new requirements take effect January 1, 2027. For ecommerce businesses, that could mean taking a closer look at customer information obtained through data enrichment, advertising and marketing partners, third-party data providers, and other outside sources.…

READ FULL POST
FCC to Consider Eliminating Key TCPA Rules at October 28 Meeting

FCC Set to Adopt TCPA Revocation Reforms Championed by EIA at Its September 30 Open Meeting

Ecommerce Innovation Alliance

September 11, 2026

The FCC has announced that it will vote at its September 30, 2026 open meeting to adopt a Report and Order and Further Notice of Proposed Rulemaking that would modernize the TCPA’s consent revocation rules — and the draft order, circulated publicly on September 9, cites the Ecommerce Innovation Alliance’s comments in support of two of its most consequential reforms. For EIA members, this is a significant win. …

READ FULL POST
California’s DROP Tool Is Now Live and It Changes the Data Landscape

California Steps Up Data Broker Enforcement Under the CCPA and Delete Act

Ecommerce Innovation Alliance

August 25, 2026

California privacy regulators are sending an increasingly clear message to businesses across the digital advertising and ecommerce ecosystem: data broker compliance is becoming an active enforcement priority. In August, the California Privacy Protection Agency (CalPrivacy) announced two data broker enforcement actions in less than a week. One marked the Agency’s first action against a data broker under both the California Consumer Privacy Act and the Delete Act.…

READ FULL POST
US Senator Wyden Calls for Coordinated State Enforcement of Global Privacy Control Signals

US Senator Wyden Calls for Coordinated State Enforcement of Global Privacy Control Signals

Ecommerce Innovation Alliance

August 20, 2026

As more states give consumers the ability to automatically opt out of certain uses of their personal information, Senator Ron Wyden (D-Ore.) is urging state regulators to take a more coordinated approach to enforcing those rights. In an August 3rd letter to attorneys general and privacy regulators in 11 states, Senator Wyden called for clearer guidance and collective enforcement around Global Privacy Control, a technology that allows consumers to communicate an opt-out preference automatically through their browser rather than submitting individual requests to every website they visit.…

READ FULL POST
Minnesota Consumer Data Privacy Act (MCDPA) violations can trigger immediate enforcement risk for e-commerce businesses

Minnesota’s Privacy Law Moves Into Enforcement and Raises New Stakes for Businesses

Ecommerce Innovation Alliance

April 13, 2026

The Minnesota Consumer Data Privacy Act (MCDPA) has entered a new phase and for ecommerce businesses, the stakes just got higher. While the law took effect in July 2025, it included a provision requiring companies be given 30-day cure to fix compliance issues before facing enforcement by the state. The requirement to provide a grace period expired on January 31, 2026. Now, violations can trigger immediate enforcement risk.…

READ FULL POST
Next