On December 14th, 2022, in collaboration with technologists on team CTO and attorneys in BCP, I gave a presentation at the Federal Trade Commission’s December Open Commission meeting on the systemic...

In a complaint against Twitter announced today, the Federal Trade Commission alleged the company deceptively used Twitter users’ phone numbers and email addresses, which were collected for security...

The FTC has long stressed the importance of good incident response and breach disclosure as part of a reasonable information security program, both through cases and business guidance resources.[1] In...

Log4j is a ubiquitous piece of software used to record activities in a wide range of systems found in consumer-facing products and services. Recently, a serious vulnerability in the popular Java...

The Federal Trade Commission is aggressively hiring Technologists to help drive the agency’s work, ensure a vibrant technology marketplace, conduct investigations, and hold companies and people who...

Earlier today, the FTC announced a revised settlement with Uber regarding the company’s privacy and data security promises. The case involved multiple breaches of Uber’s cloud storage infrastructure...

Today, the FTC announced a lawsuit against four individuals alleging that they have promoted one or more fraudulent “chain referral schemes.” Such schemes are not new – in fact, the FTC has brought...

Because the FTC’s consumer protection and competition missions cut across so many technology industries, some call it the “Federal Technology Commission.” With only a few exceptions, the FTC protects...

Data security is a process that evolves over time as new threats emerge and new countermeasures are developed. The FTC’s longstanding advice to companies has been to conduct risk assessments, taking...

Figure 1 Identifying customers that visit multiple retail locations for the same store(Source: Fast Company, “Here’s What Brick-And-Mortar Stores See When They Track You”) Last week, the FTC announced...

One of the most misunderstood topics in privacy is what it means to provide “anonymous” access to data. One often hears references to “hashing” as a way of rendering data anonymous. As it turns out...