Federal Trade Commission (FTC)

Mar 03 2021

WPF urges US Federal Trade Commission to re-examine data breach notification requirements for health data in Flo Health proposal

The World Privacy Forum has submitted comments to the FTC regarding its proposed consent order In the Matter of Flo Health, Inc. requesting that the FTC conduct further analysis regarding the FTC Health Data Breach Rule and its potential applicability to the alleged unconsented sharing of women’s pregnancy, menstruation, mental health, and other data with

Feb 23 2021

WPF comments to the US Federal Trade Commission regarding Everalbum proposal

The World Privacy Forum submitted comments to the US Federal Trade Commission regarding its proposed consent order regarding In the Matter of Everalbum, Inc. The FTC alleges that Everalbum misrepresented to its users the circumstances in which the company would utilize face recognition on its users’ photos. The Commission’s complaint also alleges that Everalbum utilized

Jan 12 2021

FTC proposes precedent-setting face recognition settlement: photo app company must delete consumers’ photos and the algorithmic models it developed using the photos

The FTC has proposed a crucially important settlement with a photo app developer, Everalbum Inc., which the FTC says “deceived consumers about its use of facial recognition technology and its retention of the photos and videos of users who deactivated their accounts.” The proposed FTC settlement will require the company to obtain consumers’ express consent

Jul 24 2019

Highlights of the FTC and DOJ Facebook complaint and order

While the $5 billion fine in the Facebook settlement has received a lot of attention, it is the compliance requirements that come with it that are of particular interest. Also noteworthy are the details in the complaint about how Facebook has handled facial recognition information and phone numbers.

Jul 10 2019

Phantom debt brokering: an emerging form of identity theft

The FTC recently announced a “phantom debt broker” settlement. Phantom debt is debt that has been fabricated and then treated as if it was real debt that could be collected from consumers. This case gives a clear view into practices that form the modus operandi for a newly emerging type of identity theft.

National IDs Around the World — Interactive map

About this Data Visualization: This interactive map displays the presence...
Report: From the Filing Cabinet to the Cloud: Updating the Privacy Act of 1974

This comprehensive report and proposed bill text is focused on the Privacy Act of 1974, an important and early Federal privacy law that applies to the government sector and some contractors. The Privacy Act was written for the 1970s information era -- an era that was characterized by the use of mainframe computers and filing cabinets. Today's digital information era looks much different than the '70s: smart phones are smarter than the old mainframes, and documents are now routinely digitized and stored and perhaps even analyzed in the cloud, among many other changes. The report focuses on why the Privacy Act needs an update that will bring it into this century, and how that could look and work. This work was written by Robert Gellman, and informed by a two-year multi-stakeholder process.
COVID-19 and HIPAA: HHS’s Troubled Approach to Waiving Privacy and Security Rules for the Pandemic

The COVID-19 pandemic strained the U.S. health ecosystem in numerous ways, including putting pressure on the HIPAA privacy and security rules. The Department of Health and Human Services adjusted the privacy and security rules for the pandemic through the use of statutory and administrative HIPAA waivers. While some of the adjustments are appropriate for the emergency circumstances, there are also some meaningful and potentially unwelcome privacy and security consequences. At an appropriate time, the use of HIPAA waivers as a response to health care emergencies needs a thorough review. This report sets out the facts, identifies the issues, and proposes a roadmap for change.