Perspectives on Privacy, Data Protection & Data Security

TRUSTe, Inc., a major provider of privacy certifications for online businesses, recently settled with the Federal Trade Commission (FTC) over charges that it has been engaging in deceptive business practices.

In October 2014, California Attorney General Kamala Harris released the California Data Breach Report, the state’s most recent analysis of data security threats facing businesses and consumers.

The Federal Trade Commission recently named Ashkan Soltani as its newest Chief Technologist.

Ikea recently argued that a class action filed against it based on alleged violations of California’s Song-Beverly Act should not be maintained.

The Obama Administration has announced a series of initiatives to address the growing number of data breaches at major retailers.

FTC recently brought its first case under the 2010 Restore Online Shoppers’ Confidence Act that prohibits online sellers from charging consumers in an Internet transaction unless the seller has clearly disclosed all material terms of the transaction and obtained consumers’ express informed consent.

The Better Business Bureau’s Online Interest-Based Advertising Accountability Program (Accountability Program) recently challenged Best Buy, Yelp, Answers Corp., Buzzfeed Inc., and Go.com over the companies’ failure to provide adequate notice regarding the fact that information was collected from th

The outdoor sporting goods company Bass Pro recently agreed to pay $6 million to settle claims that it violated California privacy laws.

In testimony before the US Senate Judiciary Committee earlier this summer, the Federal Trade Commission (FTC) lent its support to federal legislation that would require businesses to obtain “affirmative express consent” from consumers before collecting geolocation data from mobile devices.

On September 15, 2014, Arent Fox was in attendance at the Federal Trade Commission’s (FTC) public workshop on so-called “Big Data” that was designed to explore how its use is impacting American consumers.

European Data Protection Authorities (DPAs) — the entities responsible for enforcing the European Union (EU) Data Directive and the EU Cookie Directive — are taking part in what is being referred to as “Cookie Sweep Day.”

Walmart recently argued that the US District Court for the Eastern District of California should not grant class certification in a suit alleging that Walmart’s data collection practices violate California’s Song-Beverly Credit Card Act of 1971 (Song-Beverly Act).

Recent revisions to Federal Trade Commission (FTC) compliance materials offer new clarity on the Children’s Online Privacy Protection Act (COPPA) Rule and provide businesses with several new tools to consider as they determine how to comply with the Rule’s requirements.

After a spate of high-profile data security breaches, many are asking what can be done to prevent such security lapses and who should be held responsible.

In 2014, Macy’s and Foot Locker became the latest retailers to be forced to defend allegations that they illegally collect personal information from shoppers.

The Federal Trade Commission (FTC) recently won a significant victory in federal court in its ongoing efforts to hold businesses accountable for their data security practices.

In the last year, more than 17 class actions have been filed against retailers based on their alleged collection of ZIP codes from their customers.

In a case against LabMD, a judge ruled that the FTC must disclose the internal standards it uses to determine whether a company maintains adequate data security.

The Federal Trade Commission (FTC) recently charged two companies — Fandango, LLC, and Credit Karma, Inc. — with violating the FTC Act by misrepresenting the security of their mobile apps and failing to securely transmit sensitive personal information over the Internet.

The Council of Better Business Bureaus (BBB) recently announced that it will be increasing its enforcement efforts for website operators that participate in online behavioral advertising (OBA), which is targeted advertising to consumers based upon their interests.

Five top stories are making headlines in advertising and promotions.

According to the US District Court for the Northern District of California, Google’s co-mingling of the personal identification information (PII) it collects from users across multiple product platforms does not create an injury sufficient to grant standing to sue in federal court.

With the proliferation of smart phones and other mobile devices, it has never been easier for brands and marketers to collect data about the habits and desires of their customers.

Already one of the strictest states in the country when it comes to protecting online privacy, California recently passed another law that may require website operators to change their privacy policies.

Beginning January 1, 2014, websites and online service operators that collect consumers’ personally identifiable information will likely be forced to update their privacy policies to comply with a new law in California.