The FTC recently announced a “phantom debt broker” settlement. Phantom debt is debt that has been fabricated and then treated as if it was real debt that could be collected from consumers. This case gives a clear view into practices that form the modus operandi for a newly emerging type of identity theft.
The World Privacy Forum has published its discussion draft privacy bill that provides rules of the road for standards setting in the area of data privacy and security. The discussion draft sets forth a pathway to creating voluntary consensus standards to facilitate granular and contextual standard-setting focused on privacy and security issue areas. Voluntary consensus standards
The World Privacy Forum has submitted a set of key comments to the US Federal Trade Commission regarding privacy frameworks and governance. The comments introduce the idea of knowledge governance and propose frameworks that will work to solve the serious privacy challenges we face in complex data ecosystems.
The FTC finalized an expanded settlement with Uber, Inc. regarding the company’s data security practices. According to the FTC complaint, in the midst of the Commission’s original investigation, Uber experienced a second serious breach and waited more than a year after learning of the breach before informing the public or the Commission. The World Privacy Forum
In comments to the FTC regarding a proposed revised consent decree with Uber Technologies, Inc., WPF urged the FTC to clarify what the term “assessment” means in the context of a consent decree with a company. The comments note that the requirement for an assessment is not the same as the requirement for an audit.