Business Blog

In its August 2017 proposed consent agreement with Uber, the FTC alleged, among other things, that the company’s unreasonable security practices resulted in a May 2014 data breach. But there’s more to the story now. According to the FTC, Uber experienced another breach in the fall of 2016 – right in the middle of the FTC’s nonpublic investigation – but didn’t disclose it to the FTC until November 2017.

When the screen goes blue
And the car breaks down
And the smartphone keeps rebooting eternally
Consumers won’t be afraid
No, they won’t be afraid
Just as long as you stand by your warranty.

Here’s the thing about nectar. It can be sweet, but sticky. People who paid Palo Alto-based Nectar Brand LLC for mattresses labeled “Designed and Assembled in the USA” thought they were getting a sweet deal. In fact, buyers were stuck with mattresses imported from China, already completed. The company, which also uses the names Nectar Sleep and DreamCloud, performed no assembly operations in the United States.

When the FTC’s Bureau of Consumer Protection started the Business Blog in 2010, we promised readers “a minimum of ho-hum, a maximum of how-to, and as little yadda yadda yadda as a legal website can manage.” More than 1,000 Business Blog posts later and we’re still striving to keep things engaging and enlightening (although being a legal website and all, we’ve succeeded is cutting out only two of the yaddas).

Every business wants to forge an ongoing relationship with their customers. That principle takes on special significance for mobile device manufacturers when they need to issue security patches for the operating system software on their phones and tablets. Once devices are in consumers’ hands, are they getting the patches they need to protect against critical vulnerabilities? Are companies deploying those patches in a timely fashion and for a reasonable length of time?

The FTC is eyeing its Contact Lens Rule and has announced the agenda for a March 7, 2018, workshop, The Contact Lens Rule and the Evolving Contact Lens Marketplace.

Right now DC is the place to be for people interested in the latest on consumer privacy and data security. The FTC’s third PrivacyCon begins at 9:15 ET on Wednesday, February 28, 2018, with opening remarks from Acting Chairman Ohlhausen. Like the first two PrivacyCons, this year’s event features many of the biggest names in the research world discussing their findings.

As a business person, you know that accessing the public Wi-Fi network in an airport lounge, coffee shop, or other location can be risky. Public networks aren’t very secure – or, well, private – and it could be easy for others to intercept your confidential business or personal data. But there are times when every executive has to be out and about. So what can you do to keep your mobile data private and secure? Some people use Virtual Private Network (VPN) apps to shield traffic from their mobile devices from prying eyes on public networks.

Engage, connect, protect was the theme of a series of Small Business Security Roundtables the FTC sponsored last summer. We listened to businesses talk about the challenges they face in securing sensitive information and fending off cyber threats. We also heard that they want concrete advice from the FTC. For example, how can a small company – especially one that may not have the in-house expertise to host its own website – get down to business while also addressing these concerns?