For debt buyers and sellers, keeping sensitive information secure should be business as usual. The FTC has seven tips for members of the industry to help reduce the risk of unauthorized disclosure.
Advice for businesses about building security into products connected to the Internet of Things, including proper authentication, reasonable security measures, and carefully considered default settings.
A step-by-step plan for determining if your company is covered by COPPA — and how to comply with the Rule.
Guidance for business on complying with the FTC’s Health Breach Notification Rule. Who’s covered by the Rule and what companies must do if they experience a breach of personal health records.
If you report information about consumers to consumer reporting agencies (CRAs) — like a credit bureau, tenant screening company, or check verification service — you have legal obligations under the Fair Credit Reporting Act's Furnisher Rule.
Does your company keep sensitive data — Social Security numbers, credit reports, account numbers, health records, or business secrets? If so, then you’ve probably instituted safeguards to protect that information. Your information security plans also should cover the digital copiers your company uses.
Once your business is finished with sensitive information derived from consumer reports, what happens to it then? Under the Disposal Rule, your company must take steps to dispose of it securely.
Tips for organizations under FTC jurisdiction to determine whether they need to design an identity theft prevention program.
Under the FTC's Health Breach Notification Rule, companies that have had a security breach must: 1. Notify everyone whose information was breached; 2. In many cases, notify the media; and 3. Notify the FTC.
These days, it is almost impossible to be in business and not have personally identifying information about your customers or employees. If this information falls into the wrong hands, it could put them at risk for identity theft. Find out the steps to take and who to contact if sensitive data is compromised.
Mobile app developers: How does your app size up? Have your built security in from the start? The FTC has a dozen tips to help you develop kick-app security for your product.
When developing a health app, sound privacy and security practices are key to consumer confidence. Here are some best practices to help you build privacy and security into your app. These practices also can help you comply with the FTC Act.
You’re developing a health app for mobile devices and you want to know which federal laws apply. Check out this interactive tool.
Most businesses collect and store sensitive information about their employees and customers. If you use Peer-to-Peer (P2P) file sharing software in your business, consider the security implications and minimize the risks associated with it.
Practical tips for business on creating and implementing a plan for safeguarding personal information.
Do the settings on your servers open your system to misuse? An international group of government agencies says a few quick, easy, and no- or low-cost steps can protect your computer systems.
It’s just common sense that any company or organization that collects personal information from customers or employees needs a security plan. Learn more about designing and implementing a plan tailor-made to your business.
What’s on the credit and debit card receipts you give your customers? Under federal law, you must delete the card’s expiration date and shorten the account information to include no more than the last five digits of the card number.
10 practical lessons businesses can learn from the FTC's 50+ data security settlements.