To update you on the FTC’s privacy and data security initiatives

When it comes to consumer privacy and data security, your customers and colleagues want to know what’s going on at the FTC, and they want that information delivered in an easy-to-understand, to-the-point format. The agency’s 2020 privacy and data security updates are ready for you to read, publish and share.

implement

Drawing on decades of experience in consumer privacy and data security enforcement, the FTC announced some noteworthy cases in 2020. Here are some highlights:

• privacy. In addition to the court’s final approval of the FTC’s settlement with Facebook, the Commission also took action against Zoom in 2020 to address false and deceptive encryption claims and the unfairness of Zoom’s covert installation of software that bypassed security features of Apple’s Safari browser. practice.
• Data security. Settlements with “smart” lock maker Tapplock, emergency travel services company SkyMed International and mortgage industry analytics firm Ascension Data & Analytics all include strengthened orders imposing greater liability on businesses.
• Fair Credit Rating Act. Actions against retailer Kohl’s Department Stores, mortgage company Mount Diablo Lending and background reporting company AppFolio show that the Fair Credit Reporting Act is celebrating its 50th birthday with renewed vigor.
• COPPA. The cases against HyperBeard and Miniclip demonstrate the FTC’s continued commitment to enforcing children’s online privacy rules.
• Telemarketing. Actions against companies that engage in or facilitate illegal telemarketing, including VoIP service providers such as Alcazar Networks, are the latest steps to protect consumers from spam calls. 2020 also marked the end of a decade-long lawsuit against Dish Network by the Federal Trade Commission and the states of California, Illinois, North Carolina, and Ohio, resulting in financial relief totaling $210 million.

rule

The Federal Trade Commission enforces more than a dozen rules designed to protect the privacy and security of consumers’ personal information. In 2020, reviews of many of these regulations are underway, including the Health Breach Notification Rule and the COPPA Rule.

Reports and Research

Section 6(b) of the FTC Act authorizes the Commission to conduct broad studies based on information submitted by companies in the form of special reports. In 2020, the FTC issued 6(b) orders to nine social media and video streaming services: Amazon.com; ByteDance Inc. (TikTok); Discord Inc.; Facebook Inc.; Reddit Inc.; Snapshot Inc. ; Twitter Inc; WhatsApp Inc; and YouTube LLC. The orders require them to provide data about how they collect, use, track and present personal and demographic information; their advertising and user engagement practices; and how their practices impact children and teenagers. Additionally, the FTC submitted three reports to Congress in 2020 related to its privacy and data security efforts: The Fair Credit Reporting Act: Efforts to Advance Consumer Report Accuracy and Disputes, Uses and Needs to Protect Consumer Privacy and Security resources and the FTC’s authority to protect consumer privacy and security.

workshop

Last year, the FTC held three workshops that brought stakeholders together to discuss critical privacy and security issues: Information Security and Financial Institutions: FTC Review of Safeguards Rules, PrivacyCon 2020, and Data to Go: FTC on Data Accessibility Portability Workshop.

Consumer education and business guidance

In 2020, the FTC distributed millions of consumer education materials in English and Spanish on topics such as identity theft, children’s online safety, mobile privacy, credit reporting, do not call, and computer security. The FTC updated its IdentityTheft.gov website and published dozens of posts on its consumer blog to alert readers to the latest scams that could put their information at risk. For businesses, the FTC continues to publish an extensive library of resources, including a set on small business cybersecurity, and has published 55 business blog posts on the topic to help businesses meet their privacy commitments and protect their Sensitive information in your possession.

international participation

In 2020, the FTC continued to work with foreign privacy authorities, international organizations, and the Global Privacy Network to encourage cooperation in privacy and data security investigations. The Federal Trade Commission also plays a role in advocating for globally interoperable consumer privacy protections. Another big priority for 2020: Engage in international policy deliberations and projects on privacy and data security, including the global response to COVID-19 pandemic.