Multi-State Privacy Sweep Targets Ecommerce Brands on Global Privacy Control Compliance

Broad Business Coalition Urges Supreme Court to Limit Expansion of Video Privacy Law

Ecommerce Innovation Alliance

July 13, 2026

The U.S. Supreme Court is now considering one of the most significant digital privacy cases for online businesses in years. In Salazar v. Paramount Global, a growing coalition of business organizations is urging the Court to avoid expanding a decades-old Video Privacy Protection Act (VPPA) law in ways that could expose countless websites to new class action lawsuits.…

READ FULL POST
Federal Judge Rejects California Invasion of Privacy Act (CIPA) Pixel Lawsuit Lacking Evidence of Genuine Privacy Harm

Federal Judge Rejects CIPA Pixel Lawsuit Lacking Evidence of Genuine Privacy Harm

Ecommerce Innovation Alliance

July 9, 2026

For the past several years, ecommerce businesses have faced an onslaught of lawsuits targeting the routine use of website analytics and advertising technologies. Plaintiffs' attorneys have increasingly relied on the California Invasion of Privacy Act (CIPA) to argue that common website tracking tools constitute unlawful surveillance, even when they collect only standard browsing information.  Many of these lawsuits have followed a familiar pattern: broad allegations, little evidence of actual harm, and significant pressure on businesses to settle rather than endure expensive litigation.…

READ FULL POST
United Against CIPA Shakedown Lawsuits: EIA Continues Advocacy in Support of California Senate Bill 690

A Major Step Forward: SB 690 Advances Out of Committee to Curb CIPA Shakedowns

Ecommerce Innovation Alliance

July 6, 2026

We have important news to share in the fight against abusive California Invasion of Privacy Act (CIPA) litigation. On July 1, the California Assembly Committee on Privacy and Consumer Protection heard testimony on Senate Bill 690 (SB 690) and, after adopting a set of amendments authored by the bill's sponsor, voted unanimously to advance it. The amended version was re-referred to the Assembly Committee on Appropriations.…

READ FULL POST
California Consumer Privacy Act (CCPA) cybersecurity audit and risk assessment requirements in effect and Ecommerce Businesses Need to Pay Attention Today

California’s New Cybersecurity Audit Mandate: Why Ecommerce Businesses Need to Pay Attention Today

Ecommerce Innovation Alliance

April 16, 2026

If your ecommerce business processes significant volumes of consumer data in California, a new regulation now on the books may soon require you to conduct — and formally certify — an annual cybersecurity audit. The requirement, finalized under the California Consumer Privacy Act (CCPA) and approved by the California Office of Administrative Law in September 2025, took effect on January 1, 2026, and represents one of the most prescriptive cybersecurity accountability measures any U.S. state has imposed to date.…

READ FULL POST
Minnesota Consumer Data Privacy Act (MCDPA) violations can trigger immediate enforcement risk for e-commerce businesses

Minnesota’s Privacy Law Moves Into Enforcement and Raises New Stakes for Businesses

Ecommerce Innovation Alliance

April 13, 2026

The Minnesota Consumer Data Privacy Act (MCDPA) has entered a new phase and for ecommerce businesses, the stakes just got higher. While the law took effect in July 2025, it included a provision requiring companies be given 30-day cure to fix compliance issues before facing enforcement by the state. The requirement to provide a grace period expired on January 31, 2026. Now, violations can trigger immediate enforcement risk.…

READ FULL POST
Ecommerce Businesses Should Weigh In on California’s CPPA CalPrivacy “Frictionless” Opt-Out Rules

Just Days Left: Ecommerce Businesses Should Weigh In on California’s “Frictionless” Opt-Out Rules

Ecommerce Innovation Alliance

March 30, 2026

The California Privacy Protection Agency (CPPA), referred to as “CalPrivacy”, is asking for input—and what comes next could directly impact how your business handles opt-outs and data rights. There are just a few days left for businesses around the U.S. to weigh in on a key California privacy issue that could shape future compliance requirements. Public comments must be submitted to CalPrivacy by April 8, 2026. …

READ FULL POST
Next