Blog Posts Tagged with Privacy and Security

During this pandemic, preserving public health has, rightly, been our nation’s top concern. But a lively debate has arisen during this time about whether that top priority necessarily means that other values – such as privacy – need to give way. If tracking people’s location will facilitate contact tracing and enforcement of shelter-in-place mandates, do we give governments and commercial partners carte blanche to track our whereabouts? Will enforcing longstanding privacy requirements impede the flow of life-saving public health information?

For businesses, cloud services are kind of like clouds. At their best, they can be soothing and expansive. But for companies that fail to appreciate the security implications, their ethereal presence may hide dangerous storms within. As cloud computing has become business as usual for many businesses, frequent news reports about data breaches and other missteps should make companies think carefully about how they secure their data.

A large-scale scam involving phony unemployment benefits claims has been making headlines. Criminals, possibly based overseas, are filing claims for benefits, using the names and personal information of people who have not lost their jobs. The investigation is ongoing, but this much is known: the fraud is affecting tens of thousands of people, slowing the delivery of benefits to people in real need, and costing states hundreds of millions of dollars.

Next on the FTC’s regulatory review calendar: the Health Breach Notification Rule. In place since 2009, the Rule requires vendors of personal health records and related entities that aren’t covered by HIPAA to notify individuals, the FTC, and, in some cases, the media when there has been a breach of unsecured personally identifiable health data.

In these unprecedented times, the Commission is working on all fronts to stop pandemic-related scams or deception – and to warn consumers and businesses about them. But our work in other areas continues, too. Today, we’re taking a minute to take stock of some of the highlights from 2019.

“Social distancing,” “shelter-in-place,” “virtual happy hour”— these are some of the new expressions on everyone’s lips the past few weeks. For many, add “remote learning” to the list. Because of school closures, millions of students are now using online, education technology (or “ed tech”) services to engage in remote learning from home. And while this fills a vital need, it’s important to keep in mind that many of these ed tech services collect and use student’s personal information.

If your business makes “smart” devices, you’ll want to read about Tapplock’s settlement with the FTC. It’s one more example of why businesses in the Internet of Things (IoT) space need to think about privacy and security when designing connected products.

It’s an unprecedented time. But even in the midst of monumental change, the FTC’s commitment to its consumer protection mission remains constant. Here’s a statement from Chairman Simons about the ongoing work of the Bureau of Consumer Protection:

Even as we all adjust to day-to-day changes, your work – and the work of the FTC – continues. If you’re a technologist or academic interested in presenting your latest research at the FTC’s PrivacyCon 2020, please let us know by April 10, 2020. Check out the Call for Presentations and respond by the deadline.