Tag: Data security

The FTC recently announced a new enforcement action in which it alleged that the data broker Mobilewalla collected and retained sensitive location information from consumers—often without their...

Don’t judge a book by its cover – how a technology is named doesn’t tell you how it is used. This is the case with Data Clean Rooms (“DCRs”), which are not rooms, do not clean data, and have...

As with previously discussed security principles, many common types of software flaws can be preemptively addressed through systematic and known processes that prevent or minimize the likelihood of...

In March, the Federal Trade Commission hosted the first-ever Technology Forum by the International Competition Network (ICN) members in Washington, D.C. The forum brought together 21 competition...

For more than two decades, the FTC has been bringing enforcement actions for violations of national consumer protection laws due to companies’ poor security practices. These poor practices have...

The FTC has long stressed the importance of good incident response and breach disclosure as part of a reasonable information security program, both through cases and business guidance resources. [1]...

Log4j is a ubiquitous piece of software used to record activities in a wide range of systems found in consumer-facing products and services. Recently, a serious vulnerability in the popular Java...

Earlier today, the FTC announced a revised settlement with Uber regarding the company’s privacy and data security promises. The case involved multiple breaches of Uber’s cloud storage infrastructure...

Because the FTC’s consumer protection and competition missions cut across so many technology industries, some call it the “Federal Technology Commission.” With only a few exceptions, the FTC protects...