Privacy Compliance News

Clarity over chaos chaos

Practical privacy guidance for ecommerce teams, product updates, and the latest on changing laws.

Thank you! Your submission has been received!

Oops! Something went wrong while submitting the form.

Practical guidance

California's DROP Is Now Enforceable. Here's What That Means for Your Business.

‍Enforcement of California's Delete Request and Opt-Out Platform (DROP) began August 1. Data brokers now face fines of $200 per request, per day. The first thing to figure out is whether California considers you one.

More articles

Privacy updates

Delaware Rewrote Its Privacy Law. About 800 Delaware Visitors a Month Could Put You in Scope.

Delaware's HB 380 takes effect January 1, 2027. Here's what to check before the deadline.

September 11, 2026

California State Capitol

Privacy updates

SB 690 Is Now Law. The CIPA Lawsuits Aren't Done Yet.

California's new SB 690 wipes out the "pen register" claims that fueled the recent wave of CIPA lawsuits, and it applies retroactively to suits filed after January 1, 2025. But the rest of CIPA still stands, so plaintiffs can pivot back to wiretapping claims against chat widgets and trackers, and opt-in consent still matters.

September 3, 2026

Privacy updates

The tools running your store are now the tools running these lawsuits.

If you run an ecommerce site, the tools you use every day, like ad pixels, session replay, chat widgets, even your search bar, are the same tools fueling a wave of lawsuits in California right now.

Privacy updates

What Vermont's New Privacy Law Means for Ecommerce Brands

Privacy laws have been moving quickly this year. Vermont became the fourth state in 2026 to pass a comprehensive privacy law, joining Oklahoma, Alabama, and Louisiana.

Privacy updates

What Louisiana's New Privacy Law Means for Your Ecommerce Stack

If you're already complying with another comprehensive state privacy law, the LDPA won't introduce many surprises. Most of the requirements will look familiar, with a few Louisiana-specific additions like the required notices and standalone revenue threshold.

Practical guidance

Connecticut just updated its privacy law again. Here's what brands need to know.

Connecticut doesn't wait around. The state has already updated its privacy law twice since 2023 with another round of changes landing soon.

No items found.

More articles

Digital communication concept showing email and online messaging interfaces with opt-out and unsubscribe options, representing user privacy choices in digital communication systems

Privacy concepts

Privacy Opt-Outs vs. Email Unsubscribes

Privacy opt-outs and email unsubscribes may appear similar on the surface, but mixing the two up can cost your business marketing opportunities. Read more.

Privacy concepts

Global Privacy Control: A New Requirement for Compliance

Global Privacy Control is making advertising opt-outs easier than ever for consumers, and failure to implement it on your website may lead to fines.

Privacy concepts

Data Brokers: What Are They and Why Does It Matter?

Lots of businesses have relationships with data brokers, but it may create some complications down the road for privacy compliance. Read the key takeaways.

Privacy concepts

Cookies & Privacy Compliance

Websites use cookies by the dozens, but most businesses don’t understand the privacy implications of this technology. Learn the key facts and requirements.

Person signing documents on a desk, representing agreements and data collection purposes between organizations and vendors in privacy compliance

Privacy concepts

Collection Purposes: How You & Your Vendors Work Together

Most data processing is now done by outside vendors, but businesses are still responsible for disclosing it. Learn how this fits into privacy compliance.

Practical guidance

California's DROP Is Now Enforceable. Here's What That Means for Your Business.

‍Enforcement of California's Delete Request and Opt-Out Platform (DROP) began August 1. Data brokers now face fines of $200 per request, per day. The first thing to figure out is whether California considers you one.

More articles

Practical guidance

California's DROP Is Now Enforceable. Here's What That Means for Your Business.

‍Enforcement of California's Delete Request and Opt-Out Platform (DROP) began August 1. Data brokers now face fines of $200 per request, per day. The first thing to figure out is whether California considers you one.

Practical guidance

Connecticut just updated its privacy law again. Here's what brands need to know.

Connecticut doesn't wait around. The state has already updated its privacy law twice since 2023 with another round of changes landing soon.

Illustration of a connected vehicle and data privacy symbols related to GM’s CCPA fine.

Practical guidance

What GM's $12.75M CCPA Fine Tells Us About Where Privacy Enforcement Is Headed

Explore what GM's $12.75M CCPA fine reveals about California privacy enforcement priorities, regulator expectations, and compliance risks for businesses.

Illustration related to the European Wax Center privacy settlement and consumer data protection concerns.

Practical guidance

The real lessons of the European Wax Center settlement

A national consumer brand just paid $5 million because their website ran tracking pixels the way almost every website runs tracking pixels. Learn more.

Server room related to personal data storage and data retention policies

Practical guidance

How Long Can Businesses Keep Personal Data?

Learn how long businesses can retain personal data under privacy laws and how to set defensible retention periods based on purpose, risk, and legal duties.

November 5, 2024

Global digital security and technology concept showing a connected world map with cybersecurity shields, data streams, and network nodes representing worldwide privacy compliance and protection

Practical guidance

One & Done Privacy Compliance? Think Again!

Privacy laws are new and rapidly changing, so businesses can't just get compliant once and then forget about it. Learn how to stay on top of these changes.

No items found.

More articles

Online document management displayed on a laptop representing privacy laws that may apply to a business

Multi-jurisdictional compliance

Which Privacy Laws Apply to Your Business?

With the increasing number of privacy laws added every year, it can be difficult to know which apply to your business. Learn about each law's criteria.

Multi-jurisdictional compliance

When Do the New State Privacy Laws Go into Effect?

U.S. state legislatures have been busy passing privacy laws. Check the exact date when each of the new laws go into effect. See what companies should know.

Illustration of an hourglass symbolizing time limits for responding to privacy requests, with digital data particles flowing through the glass and a subtle cybersecurity background suggesting data protection and compliance deadlines

Multi-jurisdictional compliance

Time Limits for Responding to Privacy Requests

The amount of time allowed to respond to privacy requests varies by jurisdiction and request type. Use this reference chart to keep it all straight.

Decorative wooden-style map of the United States with state boundaries highlighted, representing privacy compliance management across multiple jurisdictions

Multi-jurisdictional compliance

Managing Privacy Compliance in Multiple Jurisdictions

Data privacy laws are multiplying rapidly in the United States and elsewhere. Complying with all of these laws at once will take some planning. Learn more.

No items found.

More articles

Privacy updates

Delaware Rewrote Its Privacy Law. About 800 Delaware Visitors a Month Could Put You in Scope.

Delaware's HB 380 takes effect January 1, 2027. Here's what to check before the deadline.

September 11, 2026

California State Capitol

Privacy updates

SB 690 Is Now Law. The CIPA Lawsuits Aren't Done Yet.

California's new SB 690 wipes out the "pen register" claims that fueled the recent wave of CIPA lawsuits, and it applies retroactively to suits filed after January 1, 2025. But the rest of CIPA still stands, so plaintiffs can pivot back to wiretapping claims against chat widgets and trackers, and opt-in consent still matters.

September 3, 2026

Privacy updates

The tools running your store are now the tools running these lawsuits.

If you run an ecommerce site, the tools you use every day, like ad pixels, session replay, chat widgets, even your search bar, are the same tools fueling a wave of lawsuits in California right now.

Privacy updates

What Vermont's New Privacy Law Means for Ecommerce Brands

Privacy laws have been moving quickly this year. Vermont became the fourth state in 2026 to pass a comprehensive privacy law, joining Oklahoma, Alabama, and Louisiana.

Privacy updates

What Louisiana's New Privacy Law Means for Your Ecommerce Stack

If you're already complying with another comprehensive state privacy law, the LDPA won't introduce many surprises. Most of the requirements will look familiar, with a few Louisiana-specific additions like the required notices and standalone revenue threshold.

Hand flipping a wooden block showing the transition of the year from 2023 to 2024, symbolizing the end of a major year in data privacy

Privacy updates

A Big Year for Data Privacy Draws to a Close

2023 was slated to be an important year for data privacy, and it did not disappoint. Take a look back at the biggest developments over the last year.

No items found.

More articles

Detailed political map of the United States showing state boundaries representing a comparison of state privacy laws

Multi-jurisdictional privacy

State Privacy Law Comparison

Many U.S. states are enacting their own data privacy law, forming a complicated patchwork of rules. Compare the different laws' requirements. Learn more.

all Case studies

P.F. Candle Co. built a privacy workflow that their lean ecommerce team could actually maintain.

Practical guidance

P.F. Candle Co. built a privacy workflow that their lean ecommerce team could actually maintain.

TrueVault helped P.F. Candle Co identify hidden gaps, automate GPC opt-out requests, and keep workflows current as vendors, tracking tools, and privacy requirements continued changing.

Tommy John replaced scattered privacy request handling with a workflow the team could keep up with.

Tommy John replaced scattered privacy request handling with a workflow the team could keep up with.

TrueVault helped Tommy John centralize privacy requests, reduce manual coordination, and move beyond single-person dependency.

How [solidcore] scaled privacy operations and not costs

Privacy concepts

How [solidcore] scaled privacy operations and not costs

[solidcore] built its brand on customer trust. TrueVault helps the company maintain that trust through privacy operations that continue working as the business grows.

Get started

Still figuring out privacy for your store?

Our team has helped hundreds of ecommerce brands keep privacy current without adding more overhead.