California’s New Cybersecurity Audit Mandate: Why Ecommerce Businesses Need to Pay Attention Today
April 16, 2026
If your ecommerce business processes significant volumes of consumer data in California, a new regulation now on the books may soon require you to conduct — and formally certify — an annual cybersecurity audit. The requirement, finalized under the California Consumer Privacy Act (CCPA) and approved by the California Office of Administrative Law in September 2025, took effect on January 1, 2026, and represents one of the most prescriptive cybersecurity accountability measures any U.S. state has imposed to date.…
READ FULL POST
Minnesota’s Privacy Law Moves Into Enforcement and Raises New Stakes for Businesses
April 13, 2026
The Minnesota Consumer Data Privacy Act (MCDPA) has entered a new phase and for ecommerce businesses, the stakes just got higher. While the law took effect in July 2025, it included a provision requiring companies be given 30-day cure to fix compliance issues before facing enforcement by the state. The requirement to provide a grace period expired on January 31, 2026. Now, violations can trigger immediate enforcement risk.…
READ FULL POSTPost categories
- Industry News (11)
- Legal Update (28)
- Legislative Update (99)
- Organization News (6)
- Regulatory Update (77)
REcent Posts
Popular Tags
California Consumer Privacy Act (22) California Privacy Protection Agency (22) CCPA (21) CPPA (22) Ecommerce Innovation Alliance (151) EIA (150) FCC (78) Federal Communications Commission (61) mini-TCPA (27) quiet hours (31) robocalls (33) scam phone calls (26) shakedown litigation (30) SMS (39) sms marketing (67) spam calls (32) spam phone calls (22) TCPA (77) TCPA lawsuits (24) telemarketing laws (24) Telephone Consumer Protection Act (59) text messages (43) text messaging (35) text messaging laws (24) tracking technologies (27)