Legal Library: Cases and Proceedings

A lead generation company that collected sensitive information from millions of consumers under the guise of connecting them with lenders will pay $1.5 million in civil penalties and face restrictions on their operations as a result of a Federal Trade Commission lawsuit.

The FTC’s complaint alleges that since at least 2012, ITMedia Solutions LLC, a number of affiliate companies, and their owners and officers have operated hundreds of websites that were designed to entice consumers into sharing their most sensitive financial information—including their Social Security numbers and bank account information. The defendants sold that information to marketing companies and others without regard for how the information would be used, according to the complaint.

The FTC approved a proposed order banning SpyFone and its CEO Scott Zuckerman from the surveillance business over allegations that the stalkerware app company secretly harvested and shared data on people’s physical movements, phone use, and online activities through a hidden device hack.

Under an order with the FTC, OpenX Technologies, Inc. will be required to pay $2 million over allegations that the company collected personal information from children under 13 without parental consent. The FTC also alleged that the company collected geolocation information from users who specifically asked not to be tracked.

Flo Health has settled Federal Trade Commission allegations that the company shared health information of its users with outside data analytics providers after promising such information would be kept private.

Zoom Video Communications, Inc. will be required to implement a robust information security program to settle FTC allegations that the video conferencing provider engaged in a series of deceptive and unfair practices that undermined the security of its users.

The FTC sued RagingWire Data Centers, Inc. over allegations that the company misled consumers about its participation in the EU-U.S. Privacy Shield framework and failed to adhere to the program’s requirements before allowing its certification to lapse.  A proposed consent agreement that would settle those allegations was announced on June 30, 2020.