[{"source":"Canadian Association of Law Libraries / L'Association canadienne des bibliothèques de droit CALL/ACBD Blog","url":"https://www.callacbd.ca/CALL-Blog/12242053","titre":"Canadian Association of Law Libraries Intervention in Upcoming Supreme Court of Canada Copyright Case","id":3241460,"pubDate":"Mon, 26 Oct 2026 07:55:47 +0100","description":"By: Susannah Tredwell , Manager of Library Services at DLA Piper (Canada) LLP and James Bachmann , Instructional Librarian, Law Library, University of British Columbia Since 1988, when CALL/ACBD’s Copyright Committee was first set up, CALL/ACBD has advocated for its members' interests in the area of copyright. While the primary focus of CALL/ACBD’s copyright advocacy over the last few years has been on Crown copyright and primary law, CALL/ACBD has also made submissions about such areas as fair dealing and licencing. CALL/ACBD sees this work as not only supporting the needs of its members but also as serving the interests of access to justice as a whole. Continuing this work, on January 18, 2022 CALL/ACBD, along with Library Futures Institute, will act as an intervener in the Supreme Court of Canada case Society of Composers, Authors and Music Publishers of Canada, et al. v. Entertainment Software Association, et al.   Kim Nayyer, CALL/ACBD’s President, and Robert Janes of JFK Law   will be representing CALL/ACBD and Library Futures. This case addresses the question of how the concepts of “communication to the public by telecommunication” and “making available on demand” as used in the Copyright Act should be understood. The outcome of this case has the potential to significantly impact various library activities, including controlled digital lending and possibly even the simple use of hyperlinks, particularly in light of the limited scope of current library and education exceptions in the Copyright Act . CALL/ACBD's submitted that the court refrain from broadly construing the terms “making available” and “Communication to the Public by Telecommunication” and that s. 2.4(1.1) of the act (\"Communication to the public by telecommunication\")   does not need to be understood as creating a new right.   You can find CALL/ACBD’s intervener's factum at https://www.scc-csc.ca/WebDocuments-DocumentsWeb/39418/FM050_Intervener_Canadian-Association-Law-Libraries-et-al.pdf . The other factums in this case are available at https://www.scc-csc.ca/case-dossier/info/af-ma-eng.aspx?cas=39418 .  CALL/ACBD has acted as an intervener at the Supreme Court of Canada on two other occasions. In Keatley Surveying Ltd. v. Teranet Inc. , which looked at Crown copyright, CALL/ACBD submitted   that “s. 12 Crown copyright does not extend to primary sources of law”. In York University v. Canadian Copyright Licensing Agency  (\"Access Copyright\"), CALL/ACBD submitted   that the SCC “should resist the temptation to modify or clarify the existing fair dealing test” stating that the existing test “is a flexible multifactorial test that allows libraries (and other institutions) to tailor access and appropriate copying policies that consider all relevant circumstances.” CALL/ACBD also made submissions to the 2018 review of the Copyright Act , R.S.C. 1985, c. C-42: one general submission   and <a"},{"source":"FTC USA Business Blog Posts","url":"https://www.ftc.gov/business-guidance/blog/2011/04/ftcs-google-settlement-whats-buzz","description":"The FTC's Google settlement: What's the buzz? wfg-adm109 April 1, 2011 | 4:28PM The FTC's Google settlement: What's the buzz? By Lesley Fair “Sweet!  Check out Buzz.” “Nah, go to my inbox.” That was the intriguing choice facing Gmail users last year when Google launched Google Buzz, its social network. But according to a settlement announced this week by the FTC, the company violated the privacy promises it made to Gmail users and used deceptive tactics in the Buzz rollout. The story starts with Google’s privacy policy. From October 2004 until October 2010, Gmail users were told, \"Gmail stores, processes and maintains your messages, contact lists and other data related to your account in order to provide service to you.\"  On the subject of the choices users had about the use of their personal information in all of Google’s products, including Gmail, the privacy policy said, \"When you sign up for a particular service that requires registration, we ask you to provide personal information. If we use this information in a manner different than the purpose for which it was collected, then we will ask for your consent prior to such use.\"  According to the FTC, statements like that conveyed that Google would use information from people signing up for Gmail only for the purpose of providing them with email service and that Google would ask for their consent before using their info for any other purpose. So far, so good. But then came the roll-out of Google Buzz. The service allows users to share updates, comments, pictures, videos, and the like through “buzzes” made either publicly or privately to individuals or groups of users. When Buzz was launched, Gmail users were taken to a welcome screen that announced the new service and presented the “Sweet!” or “Nah” choice. If users clicked “Nah,” the FTC complaint alleges that their info was nonetheless shared in a number of ways. First, the user could still be “followed” by Gmail users who enrolled in Buzz. Second, if the Gmail user had previously created a Google profile, he or she could appear on the public Google profiles of Buzz enrollees who were following them. Third, a link to Buzz would show up on the list of links on the user’s Gmail page. If the user clicked on that link, he or she would be taken to the Buzz welcome screen and would be automatically enrolled in Buzz without any disclosure of that fact. In other words, users would be enrolled in certain features of Buzz even if they didn’t sign up. So much for “Nah.” The FTC’s complaint alleges that despite what it said in its privacy policy, Google didn’t use information from people signing up for Gmail just for the purpose of providing email service. Rather, the company used it to populate Buzz. Thus, said the FTC, the representations in Google’s privacy policy were false or misleading. Furthermore, the agency alleged that despite the promise in its privacy policy that Google would ask for consumers’ consent before using their information for another purpose, Google went ahead and used it to populate its social network without getting their permission. The FTC charged that was false or misleading and constituted a deceptive practice. The next part of the story:   The not-so-sweet results when users clicked the “Sweet!”","titre":"The FTC's Google settlement: What's the buzz?","id":3200009,"pubDate":"Tue, 06 Oct 2026 14:06:39 +0200"},{"pubDate":"Tue, 06 Oct 2026 08:06:23 +0200","id":3199074,"titre":"Planning a social media marketing campaign? Read this first.","description":"Planning a social media marketing campaign? Read this first. lfair November 13, 2018 | 12:24PM Planning a social media marketing campaign? Read this first. By Lesley Fair It started as one of those “run it up the flagpole” ideas to enlist big-name gymnasts to promote a brand of mosquito repellent just as news stories about the 2016 Brazil Olympics were sounding warnings about the Zika virus. Public relations firm Creaxion Corporation and specialty sports magazine publisher Inside Publications used a variety of digital strategies on behalf of the brand: athlete endorsements, social media posts, “advertorials,” and consumer reviews. But according to the FTC’s complaint , their efforts violated established FTC advertising principles. Which of those strategies are you using? And are you avoiding legal pitfalls by making appropriate disclosures? Creaxion – an Atlanta-based marketing and PR company – was approached by client HealthPro Brands to help launch its mosquito repellent. They agreed Creaxion would produce a “strategic media relations campaign” that would be “tied to the worldwide outbreak of the Zika Virus.” Creaxion then contacted Inside Publications, publisher of magazines like Inside Volleyball , Inside Cheerleading , and Inside Gymnastics , to broker a partnership with HealthPro. You’ll want to read the complaint for details about the “Social and Digital Media Activation and Athlete Engagement” agreement between HealthPro and Inside Publications, but here are some of the things HealthPro paid for: endorsements by leading gymnasts, magazine “articles” featuring the repellent, the product’s placement in “Good Luck” gift baskets from Inside Gymnastics to top U.S. gymnasts, and social media posts touting the product by Inside Publications and athlete endorsers. According to the complaint, Creaxion president Mark Pettit acted as an intermediary between Inside Publications and HealthPro. Ultimately, 2004 Olympic gold medal gymnast Carly Patterson Caldwell agreed to become a paid spokesperson. She received several thousand dollars for social media posts and an Inside Gymnastics advertorial. (She decided not to attend the Brazil Olympics because of her concerns about Zika.) Olympic gold medal gymnast Jake Dalton also signed on and was paid for promoting the repellent to his fans and followers. The two gymnasts posted endorsements of the repellent on social media without disclosing their paid promotional relationship. For example, Ms. Patterson Caldwell said on Facebook, “I was definitely bummed to have to make the decision to not go to Rio for the summer Olympics because of the threat of the Zika virus, but working on starting a family and being safe and protecting myself was way more important to my husband and me! I am so thankful to have found a safe and organic product (FIT Organic) that will ease my worries as mosquito season approaches.” Similarly, Mr. Dalton posted on Twitter, “Getting Rio Ready! Not worried about Zika. Fit Organic has my back and body covered. Love the Fit mosquito repellent.” Inside Publications also posted and reposted statements on social media about the repellent, primarily through its Inside Gymnastics account, including some featuring Patterson Caldwell and Dalton. According to the complaint, Inside Publications didn’t disclose the spokespersons’ paid promotional relationships with HealthPro or that its own posts were paid ads. Nor did it disclose that the “Caring for Carly,” “The latest on Zika” and “Move Over Mosquitos” articles were really paid ads. The FTC also says Creaxion conducted an online consumer review program that reimbursed Creaxion employees and “friends” for buying FIT repellent and reviewing the product online without disclosing their affiliation with the brand. The complaint charges that the gymnasts’ statements about the repellent were falsely represented as the","url":"https://www.ftc.gov/business-guidance/blog/2018/11/planning-social-media-marketing-campaign-read-first","source":"FTC USA Business Blog Posts"},{"id":3198181,"pubDate":"Mon, 05 Oct 2026 14:07:46 +0200","titre":"Keep FCRA in the foreground when the subject is background screening","description":"Keep FCRA in the foreground when the subject is background screening chundycz April 9, 2014 | 12:13AM Keep FCRA in the foreground when the subject is background screening By Lesley Fair When the talk turns to Big Data, part of the conversation is about all the public information available about people's lives – and how companies market it to prospective employers, landlords, etc.  Two cases just announced by the FTC  serve as a cautionary reminder to members of the industry that what they do may be subject to the long-standing consumer protections of the  Fair Credit Reporting Act (FCRA) .  InfoTrack, an Illinois company, and San Diego-based Instant Checkmate will be paying civil penalties to settle FTC lawsuits that they violated the FCRA.  Is it time for an FCRA refresher at your business? Instant Checkmate marketed its reports as a way for prospective employers and landlords to investigate applicants.  For example, the company advertised that one of the “GOOD REASONS to get instant criminal checks on anyone right now” was to “check out tenants before they rent.”  It also used a Google Ad Words campaign to make sure its site appeared when people searched for background checks on nannies, babysitters, maids, and housekeepers.  What kind of information would buyers get?  Current and previous addresses, birth certificates, arrest histories, and marriage and divorce records, to name just a few examples. InfoTrack offered similar services to employers nationwide, including background screening reports with people’s driving records, education and employment information, criminal histories, and even records from sex offender registries. How does the FCRA come in?  The law defines a “consumer report” as a “communication of any information” by a consumer reporting agency (CRA) that bears on a person’s “credit worthiness, credit standing, credit capacity, character, general reputation, personal characteristics, or mode of living” which is used (or expected to be used) as a factor in establishing their eligibility for credit, insurance, employment, or other reasons outlined in the law. According to the FTC, what Instant Checkmate and InfoTrack were doing triggered the FCRA.  For example, companies covered by the law must follow procedures to assure their reports are as accurate as possible, must take steps to see that those using their reports have permissible purposes for accessing them, and must provide required User Notices explaining key protections for consumers.  The law imposes special requirements when CRAs provide reports containing public record information that could have an adverse effect on a person’s ability to get a job.  In that case, the CRA must either: 1) notify the consumer that it’s reporting the information in the public record; or 2) maintain “strict procedures” – that’s the language in the law – designed to ensure the reported public information is complete and up to date. You’ll want to read the complaints for specifics of where the FTC says the companies fell short, but one example cited in the lawsuit against InfoTrack offers an object lesson on why FCRA protections are so important to consumers – and how the consequences can be devastating when companies don’t live up to the law.  According to the FTC, the reports InfoTrack provided to prospective employers included information about whether a job applicant was on the National Sex Offender Registry.  The employer would provide the first and last name and the date of birth to help InfoTrack with its search.  The problem was that before the fall of 2011, no date of birth was available for many names on the Registry.  If InfoTrack’s search found more than one person with the same first and last name, it reported a “possible match” to employers and gave them reports that included several different people with the","url":"https://www.ftc.gov/business-guidance/blog/2014/04/keep-fcra-foreground-when-subject-background-screening","source":"FTC USA Business Blog Posts"},{"source":"FTC USA Business Blog Posts","url":"https://www.ftc.gov/business-guidance/blog/2025/09/first-inform-consumers-act-enforcement-case-filed-against-online-marketplace-temu","description":"First INFORM Consumers Act enforcement case filed against online marketplace Temu kkrown September 5, 2025 | 10:00AM First INFORM Consumers Act enforcement case filed against online marketplace Temu Online marketplaces and third party sellers looking for a refresher on the INFORM Consumers Act should look no further than the recent settlement with Whaleco, Inc., which operates the online marketplace Temu. The complaint alleges the company failed to provide online shoppers with required information and tools. This is the first case brought to enforce the INFORM Act. The INFORM Act, which went into effect in 2023, seeks to make online transactions more transparent. Among other things, the law requires online marketplaces to collect, verify, and disclose certain information about high-volume third party sellers. ( Informing Businesses about the INFORM Consumers Act  has more on how the law defines terms, what’s required of online marketplaces, and the substantial penalties the FTC and state law enforcers may seek if online marketplaces violate the law.) In 2022, Temu launched its online marketplace in the United States, where consumers can view product listings on Temu’s homepage, through search results, and in gamified shopping experiences on the platform. According to the complaint, Temu violated the INFORM Act by failing to offer a mechanism for consumers to report suspicious activity — electronically and by phone — on the gamified product listings of many high-volume third party sellers and by failing to offer a telephonic mechanism on non-gamified product listings. The complaint also alleges that Temu did not post required identifying information about sellers on its gamified product listings or mobile site, and that Temu’s disclosures, when made, were difficult to find. According to the settlement, Temu will pay a $2 million civil penalty, provide a telephonic mechanism for consumers to report suspicious activity on listings, and make other required disclosures. Is your business covered by the INFORM Act? Make sure you:  Review the provisions of the INFORM Act thoroughly . Make sure you fully understand — and have measures in place to comply with — each of its requirements. Make required disclosures easy for consumers to notice . Required disclosures should stand out from any surrounding material and use plain language. Minimize or eliminate steps consumers need to take to reach required disclosures. Ensure required disclosures are available across all iterations of your platform . The INFORM Act mandates disclosures on all interfaces with product listings. And as your platforms evolve, regularly assess and update your compliance efforts. If your business sells through online platforms, check out  What Third Party Sellers Need to Know About the INFORM Consumers Act . This covers what sellers are impacted by the INFORM Act, what you can expect online platforms to require of you, and what information platforms must disclose about you to consumers. It also answers some questions you may have about the law. And if you spot a violation of the INFORM Act, r­eport it to the FTC using this  dedicated link","titre":"First INFORM Consumers Act enforcement case filed against online marketplace Temu","id":3198178,"pubDate":"Mon, 05 Oct 2026 14:07:45 +0200"},{"url":"https://www.ftc.gov/business-guidance/blog/2016/06/practice-fusion-case-suggests-6-health-privacy-pointers","source":"FTC USA Business Blog Posts","id":3194910,"pubDate":"Sat, 03 Oct 2026 08:09:37 +0200","titre":"Practice Fusion case suggests 6 health privacy pointers","description":"Practice Fusion case suggests 6 health privacy pointers lfair June 8, 2016 | 9:01AM Practice Fusion case suggests 6 health privacy pointers By Lesley Fair Combine two of the most talked-about consumer protection topics – health privacy and consumer-generated online content – and what do you get? A proposed FTC settlement with Practice Fusion, the largest cloud-based electronic health records company in the country, and six compliance tips for others in the industry. One of San Francisco-based Practice Fusion’s primary products is an electronic records system for outpatient providers. In 2009, the company launched “Patient Fusion,” an online portal where patients whose providers were already using Practice Fusion could view or download their health information or transmit it to another provider. Patient Fusion also let patients send and receive secure messages from their providers. Fast forward several years and the company decided to expand Patient Fusion to include a public directory where current and prospective enrollees could search for doctors geographically or by specialty, read patient reviews of providers, and request appointments. But Practice Fusion had to ask itself a question familiar to many online companies: How do we get the content – in this case, patient reviews? That’s the focus of the FTC’s lawsuit. According to the complaint , Practice Fusion solicited data in a misleading way that led some patients to believe they were sending follow-up messages directly to their doctors about their diagnosis, medical treatment, prescriptions, etc. – and not contributing content to a public website. Practice Fusion, however, populated its new site with the information those people provided, some of which was highly sensitive. Here’s what happened. After appointments with their doctors, patients received emails titled “How was your visit?” The message continued, “To help improve your service in the future, please let us know how your visit went” and included a link with rating stars. The message ended this way: Thank you, Dr. [Name] In a footer, the message said “This email was sent to you by Patient Fusion®, a tool Doctor [Name] uses to deliver the highest quality of care to patients.” Below that in smaller print it said “Sent on behalf of Doctor [Name]’s office by: Practice Fusion.” If patients clicked the link, they were taken to a page that asked for feedback about things like how long they had to wait for their appointment, the doctor’s bedside manner, and whether their medical concern was addressed. There also was a text box where patients were invited to “leave a review for your provider.” Below that was a pre-checked box with the phrase “Keep this review anonymous.” What did some people put in that box? Highly sensitive information directly addressed to their doctors, not evaluations meant to be shared publicly. Here are just a few examples: “Dr [name], My Xanax prescription that I received on Monday was for 1 tablet a day but usually it’s for 2 tablets a day. I have not taken it to the pharmacy yet. Can I pick up a new one, or can I get a prescription called into a pharmacy? Thanks, [patient’s full name] “I called today and left a message regarding my daughter and no one has returned my call. I think she is depressed and has stated several times this week that she wishes she was dead. Could someone please call me [phone number]?” “The cefuroxime axetil does not seem to be doing anything for me. I did a little research and I think I have a yeast infection called candida. Not sure what to do about it yet. I guess I will first try to change my diet. Medication? [patient’s full name] “I would like to make an appointment for my back pain and possible shingles. Can you please call me @ [phone number]? Thank you! [patient's full name]” “I HAVE NO INFECTION [healthcare provider name].  EVERYTHING WENT"},{"source":"FTC USA Business Blog Posts","url":"https://www.ftc.gov/business-guidance/blog/2015/01/pink-slip-slip-first-ftc-cases-challenging-deceptive-car-title-loans","description":"Pink slip slip-up: First FTC cases challenging deceptive car title loans lfair January 30, 2015 | 9:12AM Pink slip slip-up: First FTC cases challenging deceptive car title loans By Lesley Fair She’s got a competition clutch with four on the floor And she purrs like a kitten ‘til the lake pipes roar. And if that ain’t enough to make you flip your lid, There's one more thing. I got the pink slip, Daddy. Back in the days of the Beach Boys’ “Little Deuce Coupe,” the only risk to a car title – the pink slip – was when hot rodders bet them on drag races.The FTC just announced its first two settlements with car title lenders that underscore additional risks to consumers’ pink slips and wallets. What should other companies consider if they want to avoid crossing the yellow line? The complaints challenge allegedly illegal practices by First American Title Lending of Georgia, which operates over 30 locations in that state, and Finance Select, which does business as Fast Cash Title Pawn at five Georgia locations and two in Alabama. What’s a car title loan? It’s typically a high-cost, short-term loan secured with a consumer’s free-and-clear car title. The lender holds on to the title as long as payments keep coming in. Of course, if consumers don’t pay, the lender takes the car. Car title loans tend to run between $1,000 and $10,000. They have high interest rates – the typical APR can be a whopping 300% – and short repayment periods, sometimes only 30 days. Each payment after that first month is called a “renewal.” Given that many consumers who take out car title loans are in financial distress, it’s not surprising that loans may extend over a much longer period. According to the FTC, the average is more like eight renewals. In addition to holding the consumer’s car title, the lender charges monthly fees, sometimes as much as 25% of the amount borrowed per month. That means that after eight renewals, a consumer taking out a $1,000 loan could wind up paying $2,000 in fees. The FTC says the companies’ ads lured consumers in with promises of “zero” interest, but then failed to clearly and conspicuously disclose hidden conditions attached to those eye-catching deals. For example, First American Title Lending touted “0% interest” in big headlines on websites, billboards, newspaper ads, yard signs, and elsewhere. What consumers weren’t clearly told was that they’d only get the 0% rate if they were new customers, if they paid by money order or certified funds, and if they paid in full within 30 days. If it took them longer to pay – the norm in the industry – consumers would have to pony up hefty finance charges calculated back to Day 1 of that \"0% interest\" loan, as well as the fees that started on Day 31. According to the complaint, Fast Cash Title Pawn similarly advertised “0% Title Loans,” sometimes adding “1st 30 days 0%,” without clearly and conspicuously disclosing the substantial strings that were attached – including that if the consumer didn’t pay in full within 30 days, they’d have to pay the finance charge for the first 30 days in addition to charges that kicked in on Day 31.  The lawsuits allege that the companies’ practices violate the FTC Act.  The FTC says First American Title Lending also violated the Truth in Lending Act and Reg Z. Under the proposed settlements, the companies will have to clearly disclose all the qualifying terms associated with getting a loan at the advertised rate and what the finance charge would be after an introductory period ends. The orders also prohibit misrepresentations about material terms of any loan agreement. The FTC’s message to members of the industry is that they’re not flying (driving?) under the radar. Truth-in-advertising standards apply to car title loans, too. What's more, companies will be held to well-established principles of","titre":"Pink slip slip-up: First FTC cases challenging deceptive car title loans","id":3192605,"pubDate":"Fri, 02 Oct 2026 08:12:17 +0200"},{"url":"https://www.ftc.gov/business-guidance/blog/2020/06/lights-out-unsubstantiated-pain-relief-claims-deceptive-native-advertising","source":"FTC USA Business Blog Posts","id":3191275,"pubDate":"Thu, 01 Oct 2026 14:10:47 +0200","titre":"Lights out on unsubstantiated pain relief claims and deceptive native advertising","description":"Lights out on unsubstantiated pain relief claims and deceptive native advertising lfair June 25, 2020 | 3:00PM Lights out on unsubstantiated pain relief claims and deceptive native advertising By Lesley Fair For consumers struggling with severe or chronic pain, ads for a product called Willow Curve appeared to offer light at the end of the tunnel. But the FTC alleges the marketers made false and unsubstantiated claims for the product , a device that applied low-level light and mild heat to the site of pain – and set people back between $599 and $799 in the process. The proposed settlement also sheds light on the FTC’s ongoing concern with deceptive native advertising. The complaint names two Michigan companies, Physician’s Technology, LLC, and Willow Labs, LLC, and two individuals affiliated with both businesses, Dr. Ronald Shapiro and David Sutton. In ads on national TV, satellite radio, online, and in social media, the defendants claimed that for people suffering from rheumatoid arthritis, diabetic neuropathy, nerve damage, shingles, fibromyalgia, lupus, torn tendons, and other serious conditions, the light-emitting Willow Curve would provide “real, lasting, proven pain relief, without the costs, risks or inconvenience associated with elective surgery, prescription drugs or office visits.” The defendants also sold Willow Curve through a network of distributors and resellers, supplying them with promotional materials touting the product’s purported health benefits. What’s more, the defendants claimed to have clinical studies to support what they said about Willow Curve and that the FDA had reviewed and approved the device for its advertised pain relief and other health benefits. The FTC challenges those claims as false. The complaint also alleges the defendants advertised a “risk-free” and “money-back” guarantee for consumers if they were “not completely satisfied” within a specified time period. But the FTC says in many instances, the defendants required consumers to jump through hoops to get the hefty purchase price back – for example, by first undertaking a regimen of 92 “treatments” over a 180-day period. According to the complaint, those requirements were hidden behind hyperlinks or buried in paperwork in the Willow Curve box. Despite the defendants’ claim that they issued refunds within seven to ten business days, the FTC says some people never got their money back. Others got a refund a year or more later or only after reporting the defendants to a State Attorney General or the Better Business Bureau. Another notable count relates to the defendants’ use of native advertising. For example, what appeared to be an online magazine article, “Understanding the Gender Gap in Sports Injuries and Treatment,” was actually advertising for Willow Curve. According to the FTC, the defendants hired a marketing company to write this article and others, which looked a lot like the non-advertising content of the magazines and newspapers in which the ads ran. The complaint alleges the articles weren’t identifiable as ads, including when consumers posted or shared them on social media or in email. The settlement includes a judgment of $22 million, which – based on the defendants’ financial condition – will be partially suspended when defendants Shapiro and Sutton each pay $200,000. Among other things, the proposed order requires the defendants to have randomized, double-blind, and placebo-controlled testing to support a broad range of pain relief claims. The order also prohibits them from representing expressly or by implication that advertising is a statement or opinion from an independent publisher or source. The case illuminates some issues of interest to advertisers. Support pain relief claims with sound science.   There’s a predictable cycle. As more consumers experience chronic and serious pain, more marketers position their products as purported remedies. What comes next?"},{"titre":"Fighting Coronavirus scams: Taking stock","pubDate":"Thu, 01 Oct 2026 08:11:56 +0200","id":3189429,"description":"Fighting Coronavirus scams: Taking stock chundycz May 8, 2020 | 9:01AM Fighting Coronavirus scams: Taking stock By Andrew Smith, Director, FTC Bureau of Consumer Protection Since the beginning of the COVID-19 crisis, the FTC has released dozens of warning letters against people trying to make an illegal buck off the Coronavirus. More than a month in, it seems like a good time to look back at what’s happened. If you follow this blog, you’ll know these have been busy weeks – with advice about spotting the many scams we’re all facing, news of the warning letters sent on a wide range of scams, and some enforcement actions filed. You might wonder: Why send letters? Why not just sue the !*$@&#? Fair question. But the letters are working. And, given the scope of the scams out there right now, we want to get the best and fastest results we can with the most efficient tool we have. Right now, for these Coronavirus-related issues, that’s warning letters. In general, here’s how it goes: We spot someone advertising something with no proof that it works – and, in many cases, telling outright lies about its wonders. We send a letter pointing out the illegal things they’re doing. They then have 48 hours to tell us what they’ve done to resolve the problems we’ve raised. In nearly all cases so far, those who get the letters have stopped making the false claims or selling the scammy thing – whether cures from a product or earnings from a work-at-home scheme. Within 48 hours: no more lying to people, no more stealing people’s money. During a crisis like this, we’ve prioritized stopping as many bad actors as we can, as quickly as we can. And when a warning letter will do that, we’ll take that win. Most of the letters sent so far relate to the first scams out of the box: the treatments and cures – many of which we heard about from you. These treatments and cures were, of course, not at all what they claimed to be. The sellers peddled everything from teas and essential oils to IV or ozone “therapies,” stem cell treatments, and high doses of Vitamin C. All of these products have had one thing in common: There was no evidence – none – that they work against the Coronavirus. The warning letters are working in other areas, too. We’ve sent 13 letters to VoIP service providers and other companies, telling them we see how they’re helping illegal telemarketers or robocallers make calls related to COVID-19, and telling them to cut it out. And, just two weeks ago, we sent 10 letters to multi-level marketing (MLM) companies for making exaggerated earnings claims for their business opportunity selling fake Coronavirus treatments or cures from home. These companies hit the daily double: false income claims for their work-at-home program and unsubstantiated health claims for their products. But sometimes you need more firepower to get the desired result. It took a lawsuit to stop a company that, allegedly, pretended to be affiliated with the Small Business Administration’s Paycheck Protection Program, fooling hundreds – if not thousands – of small businesses. And, last week, we filed suit against Whole Leaf Organics for allegedly claiming to treat not only the Coronavirus, but also cancer with CBD. Both cases are now pending. What we know about COVID-19 changes every week. And right now, the scammers are shifting their focus to the economic impact payments, among other things, to find new ways to get your money or information. But here are some things that remain true: Scammers are peddling cures and treatments with no proof they work. Remember: Right now, there is nothing that has been proven to prevent COVID-19. Anyone who tells you to pay them by gift card, money transfer, cash, or Bitcoin is a scammer. Period. And, if they say they’re from the government, they’re not. Never give your Social Security, bank account, or credit card number to anyone who contacts you. Again, not even if they say","source":"FTC USA Business Blog Posts","url":"https://www.ftc.gov/business-guidance/blog/2020/05/fighting-coronavirus-scams-taking-stock"},{"id":3187485,"pubDate":"Wed, 30 Sep 2026 14:10:25 +0200","titre":"FTC takes on unproven health claims and “own-dorsements”","description":"FTC takes on unproven health claims and “own-dorsements” lfair March 19, 2020 | 4:38PM FTC takes on unproven health claims and “own-dorsements” By Lesley Fair It’s a disturbing trend. Companies are targeting older consumers, claiming to have easy answers for serious diseases for which there may not be a proven cure. That’s one allegation in the FTC’s action against Nevada-based telemarketer Health Center, Inc.   Another count challenges what we call “own-dorsements.” According to Health Center’s telemarketing scripts, websites, social media, and testimonials from supposedly satisfied customers, the company’s Rejuvi-Cell oral spray and Rejuvi-Sea and Rejuvi-Stem pills could treat a broad range of medical conditions: everything from cancer, Alzheimer’s disease, and Parkinson’s disease to hepatitis, heart attacks, and high cholesterol. In promoting the products, which sold in packages priced between $350 and $800, the company checked the buzzword boxes with science-y sounding terms like homeopathic , adult stem cell enhancement , and marine phytoplankton . The company claimed that diseases like diabetes, rheumatoid arthritis, and dementia “could be greatly reduced if not eliminated” through the use of its products. According to the complaint , Health Center’s telemarketers – who were instructed to follow the scripts word-for-word – told consumers the main ingredient of Rejuvi-Sea “alkalizes your body . . . so you can’t grow cancer cells.” Then there were heartfelt testimonials from purported customers who described themselves as “walking on air” and “amazed and redeemed,” thanks to the products. But the FTC says the company hasn’t conducted any studies demonstrating the products cure or treat any diseases or health conditions and there are no human clinical studies in the scientific literature to that effect. What’s more, the lawsuit alleges that some of those glowing endorsements that appeared to come from satisfied customers across the country were actually “own-dorsements” – testimonials from Health Center’s own employees. To settle the case , the defendants have agreed to injunctive provisions, including a requirement that a broad range of health claims must have the support of randomized, double-blind, and placebo-controlled human clinical testing. Almost all of the $8.6 million judgment will be suspended, based on their financial condition. Aside from the obvious points that the FTC continues to take a close look at cures targeting older consumers and that companies shouldn’t palm off endorsements from employees as independent opinions, the case illustrates two other important principles. First, the defendants’ unlawful practices were the subject of an earlier enforcement action by the Iowa Attorney General. Companies shouldn’t have to be told once of the need to substantiate their health claims – and they certainly shouldn’t have to be told twice. Second, the complaint includes a count for violating the Telemarketing Sales Rule , which prohibits misrepresentations about “any material aspect of the performance, efficacy, nature, or central characteristics of goods or services that are the subject of a sales offer.” That’s yet another reason to keep your telemarketing efforts above board .","url":"https://www.ftc.gov/business-guidance/blog/2020/03/ftc-takes-unproven-health-claims-own-dorsements","source":"FTC USA Business Blog Posts"},{"pubDate":"Fri, 18 Sep 2026 08:08:58 +0200","id":3160549,"titre":"FleetCor Agrees to Pay $100 Million to Resolve Administrative Action After Federal Court Finds that It Violated the FTC Act by Charging Unauthorized Fees","description":"FleetCor and its CEO will pay $100 million to settle a Federal Trade Commission administrative action alleging that the company charged its customers, who overwhelmingly are small businesses, undisclosed fees in connection with their use of fuel cards that FleetCor falsely promised businesses would save them money. In a complaint first filed in federal court in 2019 , the FTC alleged that FleetCor Technologies Inc., now known as Corpay Inc., and its CEO Ronald Clarke imposed a broad array of unauthorized fees that its customers never knew about and did not agree to pay, totaling hundreds of millions of dollars and harming tens of thousands of customers.  In addition, FleetCor charged late fees to customers who had either paid on time or were prevented by FleetCor from paying on time. FleetCor also misrepresented the gas savings, fraud-control features, and fees associated with its fuel cards. “FleetCor deceived its small business customers by promising fuel savings that never materialized, while unfairly charging them hidden and unauthorized fees,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “In addition to the relief the FTC has obtained in federal court, this order will help return money to the customers the company took advantage of.” According to the complaint, FleetCor often waited to begin charging many fees until several billing cycles passed, making the fees less noticeable to consumers. The complaint also alleged that FleetCor’s invoices did not disclose that any fees were being charged, requiring customers to proactively view other account management reports. Even on those documents, many fees were obscured among other information or not listed at all. In 2023, a federal district court entered summary judgment for the FTC on all counts, finding that FleetCor had charged its customers hidden or otherwise unauthorized fees and misrepresented the gas savings and fees associated with FleetCor’s fuel cards. The court-imposed order permanently prohibits FleetCor from: billing a customer for any charge unless FleetCor has obtained the customer’s express informed consent and provided clear and unavoidable information about the charge; hiding material information about a charge behind a hyperlink; and making deceptive claims about its fuel cards. In 2026, a federal appeals court upheld the summary judgment against FleetCor on all counts and affirmed the permanent injunction against it.  The court affirmed the judgment against Clarke on all but one count and vacated the injunction as to Clarke.  As part of the settlement order with the FTC, FleetCor and Clarke will pay $100 million, which will be used to provide redress to the company’s business customers harmed by its practices. FleetCor and Clarke have also agreed not to oppose reimposition of a federal court injunction against Clarke.  The Commission vote to accept the consent agreement was 1-0-1. FTC Chairman Andrew N. Ferguson is recused. The FTC will publish a description of the consent agreement in the Federal Register soon. The agreement will be subject to public comment for 30 days after publication in the Federal Register after which the Commission will decide whether to make the proposed consent order final. Instructions for filing comments will appear in the published notice. Once processed, comments will be posted on Regulations.gov. NOTE: When the Commission issues a consent order on a final basis, it carries the force of law with respect to future actions. Each violation of such an order may result in a civil penalty of up to","url":"https://www.ftc.gov/news-events/news/press-releases/2026/09/fleetcor-agrees-pay-100-million-resolve-administrative-action-after-federal-court-finds-it-violated","source":"Federal Trade Commission - Protecting America's Consumers"},{"source":"Federal Trade Commission - Protecting America's Consumers","url":"https://www.ftc.gov/news-events/news/press-releases/2026/08/ftc-finalizes-orders-cox-media-group-two-other-firms-settling-charges-they-deceived-customers-about","titre":"FTC Finalizes Orders with Cox Media Group, Two Other Firms Settling Charges They Deceived Customers About “Active Listening” AI-Powered Marketing Service","pubDate":"Fri, 28 Aug 2026 08:07:59 +0200","id":3120376,"description":"The Federal Trade Commission finalized orders requiring Cox Media Group (CMG) and two other firms to pay a total of $930,000 to settle allegations they deceived customers by falsely claiming to offer an AI-powered service that could target localized ads based on conversations captured from consumers’ smart devices and that consumers had opted into such targeting. In three separate complaints first announced in May , the FTC alleged that Georgia-based media and marketing company CMG Media Corporation, which does business as  Cox Media Group , and two marketing firms it worked with, New Hampshire-based MindSift LLC  and Wisconsin-based  1010 Digital Works LLC ,  deceived customers by claiming they used a special algorithm to listen in on and detect pertinent conversations from smart devices in order to target ads to consumers within a specific geographic region. Contrary to these companies’ claims, however, the marketing service wasn’t based on voice data, and consumers hadn’t opted into this service. If the service had functioned as advertised, this collection and use of consumers’ voice data without adequate consent would itself violate the FTC Act. Under the proposed orders settling the FTC’s allegations,  CMG must pay $880,000 while both  MindSift and  1010 Digital Works  must each pay $25,000, which will be used to provide redress to CMG customers impacted by these practices. In addition, each defendant is prohibited from making any misrepresentation about the qualities or features of its advertising or marketing services; the collection and use of voice data and whether consumers have provided their consent to collect, use or disclose their voice data; and the geographic targeting capabilities of its advertising or marketing services. After receiving two comments on the proposed settlement orders, the Commission voted 2-0 to give final approval to the consent"},{"source":"Federal Trade Commission - Protecting America's Consumers","url":"https://www.ftc.gov/news-events/news/press-releases/2026/07/ftc-approves-final-order-against-publishingcom-settling-allegations-it-misled-consumers","titre":"FTC Approves Final Order Against Publishing.com, Settling Allegations It Misled Consumers","pubDate":"Fri, 03 Jul 2026 08:06:27 +0200","id":3004264,"description":"The Federal Trade Commission finalized an order with Publishing.com LLC and its two principals, settling allegations that they misled consumers about how much money consumers were likely to earn using their self-publishing products. Under the order finalized by the Commission, Publishing.com and its principals, CEO Christian Mikkelsen and Chief Product Officer Rasmus Mikkelsen, will pay $1.5 million and be required to substantiate earnings claims in the future. In a complaint first announced in April 2026, the FTC alleged that Publishing.com claimed its programs and services would help consumers earn substantial income publishing e-books and audiobooks online. The FTC further alleged that Christian and Rasmus Mikkelsen claimed that they personally used this system to obtain significant wealth through online self-publishing. The FTC alleged, however, that most consumers who bought Publishing.com’s products and services never made the income the company promised in its advertising. Consumers who sought refunds discovered that Publishing.com imposed many additional conditions, which were often buried in fine print or the company’s lengthy terms of service, that made it difficult or impossible for consumers to get their money back. The FTC’s complaint further alleged that the company failed to disclose when reviews were written by company employees or other interested people, including relatives of the Mikkelsens, and that the company offered incentives to people for providing positive testimonials. The final order approved by the Commission prohibits Publishing.com and the Mikkelsens from: Making earnings claims unless they are not misleading and they have a reasonable basis to support them; Making the specific misrepresentations detailed in the complaint, as well as misrepresentations concerning material facts in the sale of any product or service; Failing to disclose terms and conditions of any cancellation or refund policy or failing to promptly honor a consumer’s cancellation or refund request in accordance with company policies; and Making misrepresentations regarding endorsements and reviews. The final order also requires the company and the Mikkelsens to disclose any unexpected material connections with endorsers or reviewers and any payments or other incentives for posting reviews. The Commission voted 2-0 to finalize the order and sent responses to the five"},{"description":"Amazon will pay $2.25 million in civil penalties to settle Federal Trade Commission allegations that the online retail giant knowingly violated the Fair Credit Reporting Act (FCRA) by refusing to provide transaction records to consumers whose personal information was used by identity thieves to commit fraud. The complaint , filed by the Department of Justice upon notification and referral from the FTC, alleged that in numerous instances, Amazon.com Inc. failed to comply with Section 609(e) of the FCRA, which requires companies to, within 30 days of a consumer’s request, provide victims of identity theft with application and business transaction records about fraudulent transactions made in their names. According to the complaint, Amazon had no written policy to respond to Section 609(e) requests until early 2025, after it learned of the FTC’s investigation, despite prior outreach from FTC staff advising the company to review its compliance with Section 609(e). “Amazon often put identity theft victims through a Kafkaesque ordeal by demanding they identify the thief who stole their information before Amazon would release the records the law entitles them to—records that could help victims protect themselves and recover from the fraudulent conduct,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “The FTC will not allow companies to simply ignore their legal obligations, especially those designed to support and protect identity theft victims.” Many consumers who contacted Amazon to report fraud were told by its customer service agents that they could not provide the requested records for “security” or “privacy” reasons, the complaint alleged. For example, one consumer reported that when they contacted Amazon seeking business records related to unauthorized charges stemming from a fraudulent account, a company representative said they could not share details about the other account that had used the consumer’s credit card for “security reasons” unless the consumer guessed the name on the account (the name used by the identity thief), which the consumer was unable to do after making 30 attempts. The complaint alleged that in other instances, Amazon agents told consumers they were not able to access the requested records. Amazon even refused to provide application and business transaction records to law enforcement agencies who had been authorized to, and who did, submit requests to Amazon on behalf of consumers who were victims of identity theft. Some frustrated consumers resorted to sending copies of the FCRA and FTC guidance to Amazon in hopes of receiving the requested records, but Amazon still failed to comply with the law. The complaint also alleged that in some cases where Amazon ultimately provided requested records, it failed to respond to consumers within the 30-day timeframe required by the FCRA. In addition to the $2.25 million civil penalty—a record for a Section 609(e) violation—the proposed order will prohibit Amazon from failing to comply with Section 609(e) of the FCRA, requiring the company to provide the records lawfully requested by identity theft victims and law enforcement agencies acting on their behalf. The order also requires Amazon to provide notice to consumers about how identity theft victims can request records under the FCRA. The company must also contact consumers who had requested records since April 2024 from Amazon but did not receive them to inform these consumers that it may have additional records and that the consumers may request those records from Amazon. This is the second case the FTC has brought using its authority under Section 609(e) of the FCRA. The FTC announced its first case involving a violation of Section 609(e) of the FCRA in 2020 against Kohl’s Department Stores Inc . The Commission voted 2-0 to authorize the staff to refer the complaint to the DOJ and to approve the proposed stipulated order. The DOJ filed the complaint and final","titre":"FTC Requires Amazon to Pay $2.25 Million to Resolve Charges It Knowingly Violated the Fair Credit Reporting Act","pubDate":"Wed, 01 Jul 2026 08:09:43 +0200","id":2997627,"source":"Federal Trade Commission - Protecting America's Consumers","url":"https://www.ftc.gov/news-events/news/press-releases/2026/06/ftc-requires-amazon-pay-225-million-resolve-charges-it-knowingly-violated-fair-credit-reporting-act"},{"url":"https://www.ftc.gov/news-events/news/press-releases/2026/06/ftc-data-show-people-reported-losing-3-point-5-billion-imposter-scams-2025","source":"Federal Trade Commission - Protecting America's Consumers","id":2959787,"pubDate":"Tue, 16 Jun 2026 08:09:40 +0200","titre":"FTC Data Show People Reported Losing $3.5 Billion to Imposter Scams in 2025","description":"New data from the Federal Trade Commission reveal that people reported losing a staggering $3.5 billion to imposter scams in 2025, with reported losses increasing nearly three times since 2020. FTC data also show that people reported imposter scams more than any other fraud category in 2025—nearly one in three fraud reports were about imposter scams. These scams lured consumers through text, phone, email, social media, search engine results and other means. Some of the costliest impersonation scams start with a fake security alert, often from a bank. People are convinced to move money to “protect” it, with their losses often limited only by their available funds. Last year, people reported losing nearly $1 billion to business impersonators with the highest reported losses to bank impersonators—and about $920 million to government impersonators, up from $866 million and $789 million respectively in 2024. The FTC has seen a striking increase in reported fraud losses to all types of fraud—about $16 billion was reported lost in 2025, the highest on record and an increase of about 25% compared to the 2024 figure. “Consumers derive enormous benefits from competitive markets built on truthful information. But fraud undermines that foundation, impeding the market process and preventing markets from operating efficiently,” said Christopher Mufarrige, Director of the Bureau of Consumer Protection. “The FTC will use every tool available to combat one of the most pernicious forms of fraud—government and business impersonation—and to protect the integrity of the digital economy.” The data underscore the importance of the FTC’s work with the  Elder Justice Coordinating Council (EJCC) , which is working to help raise awareness of imposter scams and other scams impacting older adults as well as other consumers. This year, the FTC, along with the Department of Justice, Department of Health and Human Services and members of the EJCC, is leading the Never Ever campaign, a public-private coordinated consumer education effort to raise awareness of government and business imposter scams. In addition to the federal agency members of the EJCC , the campaign also includes private sector representatives such as the American Bankers Association, USTelecom, Google and Microsoft. To help the public spot imposter scams, EJCC members launched the Never Ever campaign, which is aimed at promoting messaging on the key actions that government and businesses will Never Ever take. The Never Ever campaign will run from June 15 to June 26, in conjunction with World Elder Abuse Awareness Day. This first-of-its-kind public-private partnership includes participants from a wide range of organizations and is aimed at directing consumers to a website that includes information and resources to help them avoid imposter scams and what to do if they spot one. Enforcement Actions To help combat impersonation scams, the FTC in 2024 finalized the Impersonation Rule. The Rule gives the agency stronger tools to combat and deter scammers who impersonate government agencies and businesses, enabling the FTC to file federal court cases seeking to get money back to injured consumers and civil penalties against rule violators. Since then, the FTC has vigorously enforced the rule and brought a dozen enforcement actions that have resulted in halting imposter schemes and obtained over $70 million in redress for consumers. In 2025, the FTC brought law enforcement actions under the Impersonation Rule against:  American Tax Service (IRS imposter scheme);  MediaAlpha (government imposter scheme to sell health insurance);  Click Profit (business imposter money making scam);  Blackstone Legal (phantom debt business imposter scheme) and  Accelerated Debt Settlement (government and business imposter scheme that targeted older adults for debt relief). More recently, the  FTC filed a complaint against Innovative Partners in April 2026 , alleging the operators"},{"description":"The Federal Trade Commission today began enforcing the TAKE IT DOWN Act (TIDA), a law requiring platforms, at the request of victims, to remove intimate photos or videos shared online without victims’ consent. As part of its enforcement role, the FTC has launched TakeItDown.ftc.gov , a website allowing victims and survivors to submit complaints about platforms that have failed to act on valid requests for the removal of nonconsensual intimate images. The website also accepts complaints about platforms that have failed to create a process for people to request removal of these images. “Thanks to First Lady Melania Trump’s dedication, the public, especially children, will have recourse against digital exploitation and extortion,” said FTC Chairman Andrew N. Ferguson. “In the age of AI, anyone can be targeted, and that becomes even more appalling if children are involved. The TAKE IT DOWN Act empowers families and provides the FTC with an effective tool to protect minors against this form of abuse.” The FTC enforces Section 3 of the TAKE IT DOWN Act, which set a May 19, 2026, deadline for covered platforms to give people a way to request the removal of intimate photos or videos shared online without their consent and to remove those intimate images, and known identical copies, within 48 hours of a valid request. The FTC has published new guidance to help consumers in the event that nonconsensual intimate images of them are posted online. The FTC also issued  guidance for businesses about how to ensure they are complying with the law. Underscoring the FTC’s commitment, Chairman Ferguson  sent letters last week to major platforms—Alphabet, Amazon, Apple, Automattic, Bumble, Discord, Match Group, Meta, Microsoft, Pinterest, Reddit, SmugMug, Snapchat, TikTok and X—reminding them of businesses’ obligation to comply fully with TIDA no later than May 19,","pubDate":"Wed, 20 May 2026 08:10:24 +0200","id":2893630,"titre":"FTC Begins Enforcing the TAKE IT DOWN Act","url":"https://www.ftc.gov/news-events/news/press-releases/2026/05/ftc-begins-enforcing-take-it-down-act","source":"Federal Trade Commission - Protecting America's Consumers"},{"source":"EDPB News","url":"https://www.edpb.europa.eu/news/news/2026/edpb-identifies-challenges-hindering-full-implementation-right-erasure_en","description":"Brussels, 18 February - The European Data Protection Board (EDPB) has adopted a  report on its Coordinated Enforcement Framework (CEF) action on the right to be forgotten (Art.17 GDPR) .  The  Board selected this topic  as it is one of the most frequently exercised GDPR rights and one about which DPAs frequently receive complaints from individuals. The main objectives of this coordinated action are to ensure that the right to erasure is effectively exercised by individuals in Europe and understand how controllers comply with this right in practice. In addition, the EDPB identified good practices and the most important related challenges, with the aim of providing further guidance on this topic.  Throughout 2025, 32 DPAs across Europe took part in this initiative. More specifically, 9 DPAs have initiated new formal investigations or have continued ongoing ones, and 23 DPAs carried out a fact-finding exercise. A total of 764 controllers across Europe responded to the action, ranging from small and medium-sized enterprises (SMEs) to big companies active in many different industries and fields, as well as various types of public entities. The results of these national actions have been aggregated and analysed together allowing for targeted follow-up on both national and EU level.   Areas of improvement and main challenges The report lists the issues that were identified, along with a series of recommendations addressed to controllers, to help them implement the right to erasure. Seven recurring main challenges were identified by DPAs. The results confirmed some of the findings of the 2024 coordinated action on the right of access , for example when it comes to the lack of appropriate internal procedures to handle requests, or the lack of sufficient information provided to individuals. In addition, participating DPAs reported specific findings related to the reliance by some controllers on inefficient anonymisation techniques to handle erasure requests as an alternative to deletion. DPAs also noted inconsistent practices, and the difficulties faced by controllers regarding the determination of retention periods and the deletion of personal data in the context of back-ups. In addition, as the right to erasure is not an absolute right, some controllers face difficulties in assessing and applying the conditions for the exercise of this right, including in carrying out the different balancing tests between the right to erasure and other rights and freedoms.   Follow-up to help organisations comply  Extensive guidance, documents and templates exist at national level to help controllers comply with the right of erasure and help individuals exercise this right. In line with the Helsinki Statement’s objectives of making GDPR compliance easier and ensuring consistent interpretation and enforcement across Europe, the extensive guidance and templates already available at national level will be leveraged at EDPB level where appropriate.   Background and next steps The CEF is a key action of the EDPB under its 2024-2027 Strategy , aimed at streamlining enforcement and cooperation among DPAs.  In 2023, the EDPB published the report on its first coordinated action on the  use of cloud-based services by the public sector . In 2024, the EDPB also published the report on the outcome of the second coordinated action on the  designation and position of Data Protection Officers . In 2025, the EDPB issued the report on its third coordination action on the  implementation of the right of access . The CEF 2026 action will be on the  obligations of transparency and information under the GDPR .   For further information: DA DPA:   EDPB vedtager rapport om dataansvarliges overholdelse af retten til sletning EL DPA: Ολοκλήρωση της συντονισμένης δράσης του","titre":"EDPB identifies challenges hindering the full implementation of the right to erasure","id":2703238,"pubDate":"Wed, 18 Feb 2026 15:27:14 +0100"},{"source":"Federal Trade Commission - Protecting America's Consumers","url":"https://www.ftc.gov/news-events/news/press-releases/2025/12/ftc-will-require-illusory-systems-return-money-stolen-hackers-implement-information-security-program","description":"The Federal Trade Commission is taking action against Illusory Systems Inc. for failing to implement adequate data security measures, leading to a major security breach in which hackers stole $186 million from consumers. Under a proposed order settling the FTC’s allegations, Utah-based Illusory, which does business as Nomad, will be required to implement an information security program to address numerous alleged security failures and to return recovered money to affected consumers. “The FTC Act requires companies to take reasonable security measures,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “It’s important that companies live up to their security promises to consumers.” In its complaint , the FTC alleged that Nomad prominently touted its security in its advertising, claiming that it offered “security-first” services. The FTC, however, alleged that the company failed to live up to these promises by failing to: use secure coding practices; implement processes for receiving and addressing vulnerability reports and responding to security incidents; and utilize widely known technologies that might have helped mitigate consumer losses. According to the complaint, in June 2022, Nomad introduced inadequately tested code that included a significant vulnerability. Just over a month later, hackers began exploiting the vulnerability. The FTC alleged that Nomad failed to respond to the attack in time because of its inadequate security and incident response measures, which led to the loss of $186 million. The company was able to recover some money, but consumers lost approximately $100 million. Nomad was warned about the dangers of inadequate testing as well as the need to ensure it had adequate staff and security in place. The company, however, failed to implement basic safety measures that would mitigate consumer losses, the FTC alleged. Under the proposed order , Nomad will be prohibited from making misrepresentations about its security practices. In addition, the company will also be required to: Implement a comprehensive information security program that is designed to protect consumers from theft or other unauthorized access and address the security issues outlined in the FTC’s complaint; Obtain biennial assessments of its information security program by an independent third party and cooperate with the third-party assessor; and Return to consumers money recovered following the security breach that was not already returned to customers. The Commission voted 2-0 to accept the proposed complaint and order for public comment. The FTC will publish a description of the consent agreement package in the Federal Register soon. The agreement will be subject to public comment for 30 days after publication in the Federal Register after which the Commission will decide whether to make the proposed consent order final. Instructions for filing comments will appear in the published notice. Once processed, comments will be posted on Regulations.gov. NOTE:  The Commission issues an administrative complaint when it has “reason to believe” that the law has been or is being violated, and it appears to the Commission that a proceeding is in the public interest. When the Commission issues a consent order on a final basis, it carries the force of law with respect to future actions. Each violation of such an order may result in a civil penalty of up to $51,744. The lead staff attorneys on this matter are M. Hasan Aijaz and Julia Horwitz with the FTC’s Bureau of Consumer","titre":"FTC Will Require Illusory Systems to Return Money Stolen by Hackers and Implement an Information Security Program","pubDate":"Wed, 17 Dec 2025 09:50:37 +0100","id":2577895},{"description":"From writing instructions on how to make a homemade bomb to refusing to provide a list of « bad » gifts to give, ChatGPT, which is being introduced as the representative of the new generation of chatbots, has made its choice. In this series of articles devoted to the use of generative AI through various experiments, we will first review some general information about these algorithms, then focus on the limitations encountered when using","titre":"Caitch me if you can","pubDate":"Mon, 08 Sep 2025 15:32:50 +0200","id":2357390,"source":"LINC - laboratoire de recherche de la CNIL","url":"https://linc.cnil.fr/%3Ca%20href%3D%22/en/caitch-me-if-you-can%22%20hreflang%3D%22en%22%3Eview%3C/a%3E"},{"titre":"FTC Surveillance Pricing Study Indicates Wide Range of Personal Data Used to Set Individualized Consumer Prices","pubDate":"Thu, 10 Apr 2025 09:51:48 +0200","id":2044739,"description":"The Federal Trade Commission’s initial findings from its surveillance pricing market study revealed that details like a person’s precise location or browser history can be frequently used to target individual consumers with different prices for the same goods and services. The staff perspective is based on an examination of documents obtained by FTC staff’s 6(b) orders sent to  several companies in July aiming to better understand the shadowy market that third-party intermediaries use to set individualized prices for products and services based on consumers’ characteristics and behaviors, like location, demographics, browsing patterns and shopping history. Staff found that consumer behaviors ranging from mouse movements on a webpage to the type of products that consumers leave unpurchased in an online shopping cart can be tracked and used by retailers to tailor consumer pricing. “Initial staff findings show that retailers frequently use people’s personal information to set targeted, tailored prices for goods and services—from a person's location and demographics, down to their mouse movements on a webpage,” said FTC Chair Lina M. Khan. “The FTC should continue to investigate surveillance pricing practices because Americans deserve to know how their private data is being used to set the prices they pay and whether firms are charging different people different prices for the same good or service.” The FTC’s study of the 6(b) documents is still ongoing. The staff perspective is based on an initial analysis of documents provided by Mastercard, Accenture, PROS, Bloomreach, Revionics and McKinsey & Co. Image The FTC’s 6(b) study focuses on intermediary firms, which are the middlemen hired by retailers that can algorithmically tweak and target their prices. Instead of a price or promotion being a static feature of a product, the same product could have a different price or promotion based on a variety of inputs—including consumer-related data and their behaviors and preferences, the location, time, and channels by which a consumer buys the product, according to the perspective. The agency will only release information obtained from a 6(b) study as long as all data has been aggregated or anonymized to protect confidential trade secrets from company respondents, and therefore the staff perspective only includes hypothetical examples of surveillance pricing.  The staff perspective found that some 6(b) respondents can determine individualized and different pricing and discounts based on granular consumer data, like a cosmetics company targeting promotions to specific skin types and skin tones. The perspective also found that the intermediaries the FTC examined can show higher priced products based on consumers’ search and purchase activity. As one hypothetical outlined, a consumer who is profiled as a new parent may intentionally be shown higher priced baby thermometers on the first page of their search results. The FTC staff found that the intermediaries worked with at least 250 clients that sell goods or services ranging from grocery stores to apparel retailers. The FTC found that widespread adoption of this practice may fundamentally upend how consumers buy products and how companies compete. As the FTC continues its work in this area, it is issuing a request for information   today seeking public comment on consumers’ experiences with surveillance pricing. The RFI also asks for comments from businesses about whether surveillance pricing tools can lead to competitors gaining an unfair advantage, and whether gig workers or employees have been impacted by the use of surveillance pricing to determine their compensation. Comments are due by April 17. The Commission voted 3-2 to allow staff to issue the report. Commissioners Andrew Ferguson and Melissa Holyoak issued a dissenting statement related to the release of the initial research summaries. The FTC has additional resources on the interim","source":"Federal Trade Commission Concurrence communiqués","url":"https://www.ftc.gov/news-events/news/press-releases/2025/01/ftc-surveillance-pricing-study-indicates-wide-range-personal-data-used-set-individualized-consumer"}]