Blog Posts Tagged with Privacy and Security

For businesses in the middle of a global pandemic, there’s no such thing as “business as usual.” The percentage of Americans working remotely has grown substantially, now reportedly up to 33% of the U.S. workforce. Accompanying that seismic shift have been increased security threats to data, with one analysis reporting that over 36 billion online records were exposed in the first half of 2020 alone. Consumers whose lives have been upended by identity theft are paying close attention to how corporations are responding.

Have you marked your calendar for April 29, 2021, to attend Bringing Dark Patterns to Light: An FTC Workshop? The virtual event will examine digital “dark patterns,” potentially deceptive or unfair user interfaces on websites and mobile apps. In addition to your participation, the FTC is asking for research and public comments on topics related to the workshop.

It’s like a scene from an Indiana Jones movie. Our hero enters a cave in search of treasure and every labyrinthine turn poses another unexpected hazard – trip-wired blades, runaway boulders, and snakes (“I hate snakes”). But we’re not talking about a rollicking adventure flick. We’re describing the experience of many online shoppers as they navigate some companies’ websites to avoid digital danger – for example, extra items showing up in a consumer’s cart, unauthorized charges, or the unintended disclosure of personal information.

Among the challenges that COVID-19 has brought, add a higher risk of identity theft to the mix. In the past year, we had about 1.4 million reports of identity theft, double the number from 2019. Repeatedly, identity thieves targeted government funds earmarked to help individuals and small businesses hard hit financially by the pandemic. Find out about identity theft in the age of COVID-19.

Flo Health pitched its Flo Period & Ovulation Tracker as a way for millions of women to “take full control of [their] health.” But according to the FTC, despite express privacy claims, the company took control of users’ sensitive fertility data and shared it with third parties – a broken promise that left consumers feeling “outraged,” “victimized,” and “violated.” Read on for details, including a notable feature in the proposed settlement.

To meet the needs of consumers who are injured or face a medical emergency while traveling, Scottsdale-based SkyMed International sells air evacuation plans and other services. The FTC’s action against SkyMed also involves consumer injury, but not of the fractured-femur-in-France variety. According to the FTC, SkyMed put consumers’ sensitive information at risk of compromise by failing to employ a robust data security program.

To quote studio head Samuel Goldwyn’s famous malaprop, an oral contract isn’t worth the paper it’s printed on. The same can be said of a written security policy if a company doesn’t carry out its provisions.

Imagine turning on your computer one morning to discover you and your employees are locked out of your system. A threatening message appears on the screen demanding a ransom if you ever want to see your data again. You check your backups and they’ve been destroyed. Your business is at a standstill, losing money with every passing minute. It may sound like a nightmare, but for many companies, a ransomware attack is all too real. And even more disturbing is that reported ransomware attacks have increased dramatically since the beginning of the COVID-19 pandemic.

Cult classic The Big Lebowski proves that mistaken identity can be entertaining on film. But for people looking to rent a house or apartment, it wasn’t so entertaining when tenant background reports about them provided by California company AppFolio included someone else’s convictions and evictions.