SOCIAL MEDIA
Follow us on:
FTC Announces Settlement with Twitter Over Deceptive Use of Account Security Data
|
Listen to Audio Version of Text
|
The Federal and Trade Commission (“FTC”) announced today a settlement with Twitter, Inc. (“Twitter”) in which Twitter agreed to pay $150 million for its alleged misuse of user account security data, specifically email addresses and phone numbers, for advertising purposes. The government alleged that the misuse of account data was in violation of a 2011 FTC Order against Twitter, which prohibited the company from misrepresenting the extent to which it maintains and protects the security, privacy, confidentiality, or integrity of any nonpublic consumer information. The government alleged that the misuse of consumer data also violated the EU-US Privacy Shield, and the Swiss-U.S. Privacy Shield.
The FTC press release is attached here. The complaint is attached here, and the stipulated order is attached here.
In addition to the paying a $150 million fine, the government announced that Twitter has agreed to the following:
- Twitter will not profit from deceptively collected data;
- Users will have other options to multi-factor authentication such as apps or security keys that do not require the provision of phone numbers;
- Notify all users that Twitter misused the phone numbers and emails collected for targeted advertising and to provide users with information about Twitter’s privacy and security controls;
- Implement and maintain a comprehensive privacy and information security program which requires an assessment of the potential privacy and security requirements of new products;
- Limit employee access to users’ personal data; and
- Notify the FTC if it experiences a data breach.
With this enforcement action against Twitter, the FTC is clearly making a statement to companies in the business of collecting consumer data that they need to truthfully disclose the purposes for which data used for advertising purposes is collected, and that failure to disclose this information will have potential federal regulatory consequences. SaaS and software companies should take note of this particular enforcement action, and ensure that they avoid engaging in the same practices that were the subject of this enforcement action.
PRIVACY LAW BLOG
- The Prinz Law Office Adopts New Fixed Rate & Subscription Billing Packages
- FTC Announces Settlement with Twitter Over Deceptive Use of Account Security Data
- Introduction to Silicon Valley Privacy Law Blog
- Introduction to Digital Health Workshop for Non-Lawyers
- Introductory Digital Health Contracts Workshop for Lawyers
DIGITAL HEALTH LAW BLOG
- The Prinz Law Office Adopts New Fixed & Subscription Billing Options
- Kristie Prinz to Speak on “Best Practices in Negotiating Drafting and Managing Sublicenses”
- Kristie Prinz to Present Webinar on “Negotiating Consulting Services Agreements in an Uncertain Economy”
- Kristie Prinz to Present a Webinar on “Introduction to Negotiating & Drafting SaaS Agreements”
- Kristie Prinz to Present Webinar on “Best Practices for Negotiating SaaS Agreements in an Uncertain Economy”