FTC Releases 2018 Privacy and Data Security Update

The Federal Trade Commission’s privacy and security enforcement actions in 2018 included shutting down revenge porn website MyEx.com, approving a settlement with peer-to-peer payment service Venmo over deceptive privacy settings, approving an expanded settlement with Uber Technologies to resolve data security and privacy allegations, and approving a privacy and data security settlement with mobile phone maker BLU Products, Inc. The FTC also obtained a $3 million civil penalty against RealPage, Inc., for violating the Fair Credit Reporting Act by failing to ensure the accuracy of tenant screening information. The FTC announced separate settlements with electronic toy maker VTech Electronics Limited and online talent site Explore Talent over allegations that they violated the Children’s Online Privacy Protection Act. The FTC also is committed to enforcing the EU-U.S. Privacy Shield Framework. In 2018, five US companies settled FTC charges that they misled consumers about their participation in the Framework. The FTC also issues reports, conducts research, and hosts events to discuss emerging issues in consumer privacy and security. In February 2018, FTC staff released a report examining security updates issued by mobile phone manufacturers, which coincided with the Commission’s third annual PrivacyCon event.