[{"source":"FTC USA Business Blog Posts","url":"https://www.ftc.gov/business-guidance/blog/2020/01/ftc-consumer-protection-year-review-offers-2020-vision-your-business","titre":"FTC consumer protection year in review offers 2020 vision for your business","id":3203247,"pubDate":"Thu, 08 Oct 2026 08:06:58 +0200","description":"FTC consumer protection year in review offers 2020 vision for your business lfair January 8, 2020 | 9:26AM FTC consumer protection year in review offers 2020 vision for your business By Lesley Fair They say hindsight is 20/20, but what about foresight? We’re not ones to prognosticate, but a look at notable FTC cases and initiatives from the past year suggests some topics likely to be top of mind in months to come. Here is a non-exhaustive list of issues in our 2019 rearview mirror and likely visible through the 2020 windshield. Consumer privacy. The FTC’s $5 billion enforcement action against Facebook made history and headlines, but the other notable part of the case is the monumental change the order mandates to Facebook’s privacy ecosystem. The Commission opinion in Cambridge Analytica reaffirms the proposition that like any other claim, a company’s privacy promises are viewed through the lens of established FTC consumer perception principles. A series of cases demonstrates the agency’s continued commitment to challenging false or misleading representations about businesses’ compliance with the EU-U.S. Privacy Shield Framework. Another important development is the FTC’s proposed settlement with Retina-X . It’s our first action against a marketer of stalking apps – software that allowed purchasers to monitor the mobile devices on which they’re installed, without users’ knowledge. COPPA. Congress passed the Children’s Online Privacy Protection Act to ensure that when it comes to the collection of kids’ personal information online, parents are in the driver’s seat. The FTC settlement with YouTube – brought in conjunction with the New York Attorney General – alleges that the company collected kids’ personal data without parental consent, in violation of the COPPA Rule . The $170 million civil penalty broke the record for the largest remedy in an FTC COPPA case, set months before in our $5.7 million settlement with Musical.ly , now known as TikTok. If you’re a YouTube channel owner, read a special Business Blog post for tips on determining if your content is directed to children. Data security. Is your company honoring its data security promises and taking reasonable steps to safeguard the sensitive information in its possession? The FTC, CFPB, and State AG actions against Equifax illustrate how consumers are injured when companies ignore reasonably foreseeable threats. The settlement, which totals between $575 million and $700 million – also reminds businesses that heeding warnings about known risks is more prudent (and cost-effective) than the alternative. Three threads tie together the FTC’s unrelated actions against LightYear Dealer Technologies and InfoTrax Systems . They both sell management software to specific industries. They both allegedly failed to take reasonable steps to secure their networks, resulting in damaging data breaches. And they’re both covered by similar new orders the FTC has introduced in recent data security cases. If you or your clients are players in the Internet of Things, the settlement of the FTC’s litigation against connected device company D-Link sends an unmistakable message: The future of the IoT marketplace depends on secure software development. Endorsements, certifications, and influencers. Why is the FTC concerned about the accuracy of endorsements and certifications? Because they’re material to consumers. The FTC says Truly Organics’ claim that its personal care products were “certified organic” lathered up a double bubble of deception. First, its merchandise contained ingredients that weren’t organic. Second, the company falsely claimed that its products were certified by USDA’s National Organic Program. Other FTC developments focused on the use of endorsements in social media. The FTC’s action against Devumi alleges the company sold fake followers, phony subscribers, and bogus"},{"pubDate":"Thu, 11 Jun 2026 10:23:49 +0200","id":2947754,"titre":"BEREC presents its assessment of the Digital Networks Act proposal","description":"BEREC presents its assessment of the Digital Networks Act proposal yannick.stephan Wed, 10/06/2026 - 18:07 Press Releases Europe’s electronic communications framework is entering a pivotal phase of reform, with the proposed Digital Networks Act (DNA ) set to update the regulatory framework for connectivity across the EU. At the BEREC public debriefing on 10 June, the BEREC Chair, Marko Mismas (AKOS, Slovenia), and the Working Group Co-Chairs presented BEREC’s assessment of the DNA proposal, outlining key regulatory considerations that emerged from its analysis. BEREC welcomes the ambition of modernising the EU connectivity framework and supporting resilient, sustainable and high-quality digital networks. At the same time, the assessment highlights areas where further refinement may be needed to ensure that the future framework strengthens rather than adds unnecessary complexity to the internal market for electronic communications. BEREC has developed thematic papers examining key elements of the proposal in greater depth, supporting evidence-based input to the co-legislators. To further contribute to the policy debate, BEREC will publish three additional thematic papers by the end of June. BEREC remains committed to providing its technical and regulatory expertise to help shape a competitive, innovative and future-proof digital Europe. 5G slicing guidance BEREC experts look forward to receiving stakeholders’ input to the public consultation on the draft further guidance on 5G network slicing by 6 August 2026. The draft guidance aims to provide greater regulatory certainty for market players and support innovation in 5G services, while safeguarding open internet principles. Building on the existing Open Internet framework, the guidance will assist providers in assessing whether network slicing-based services comply with the Regulation, including in relation to internet access and specialised services. Reflecting the principle of technological neutrality, the approach is intended to remain relevant beyond 5G and to apply to other technologies that use comparable quality-of-service mechanisms. Call for inputs on roaming BEREC has issued a call for inputs regarding its work on roaming. This call aims to support the preparation of BEREC’s Opinion for the European Commission on the upcoming review of the EU Roaming Regulation and the Implementing Regulation on Fair Use Policy and Sustainability, which is scheduled for submission by the first quarter of 2027. Building on its 2025 Opinion, BEREC invites stakeholders to provide new information, evidence, and perspectives by 21 August 2026. In addition, following the consultation on possible amendments to the BEREC Roaming Benchmark Data Collection procedure, BEREC decided to maintain the current quarterly data collection approach. However, the expansion of the Roam-Like-at-Home regime to Ukraine and Moldova on 1 January 2026, together with the simplification proposals in BEREC’s 2025 Opinion on the Roaming Regulation, requires an update of the roaming data collection template. BEREC therefore launched a call for input on the revised template and invites operators to submit their comments by 3 July 2026. Emergency communications resilience Ensuring uninterrupted access to emergency services for end users remains a critical priority as 2G and 3G mobile networks are progressively phased out across Europe. During its latest plenary meeting, the Heads of the European regulators for electronic communications discussed and adopted a BEREC statement addressing concerns that some devices may fail to connect to emergency communications services, including 112, once legacy networks are switched off. The statement aims to raise awareness of the issue and calls for closer cooperation across the entire communications ecosystem. BEREC underlines the need for further investigation, improved detection of potential failures, and greater transparency among stakeholders to help safeguard the reliability of emergency communications throughout the technological","url":"https://www.berec.europa.eu/en/news/press-releases/berec-presents-its-assessment-of-the-digital-networks-act-proposal","source":"BEREC Office"},{"url":"https://www.edpb.europa.eu/news/news/2026/marking-10-years-gdpr-evolution-european-data-protection-landscape_en","source":"EDPB News","description":"Brussels, 27 April – Today marks the 10th anniversary of the GDPR’s adoption, the first comprehensive data protection framework spanning an entire continent, establishing clear rights for individuals and obligations for organisations across Europe. The moment that led to the creation of the EDPB The GDPR led to the establishment of the European Data Protection Board (EDPB) on 25 May 2018, replacing the Article 29 Working Party that was previously in charge of dealing with issues relating to the protection of personal data. The GDPR gave the Data Protection Authorities (DPAs) stronger enforcement powers and expanded the scope of their work from focusing mainly on national compliance complaints to routinely dealing with cross-border cases. In the past 10 years, the 31 European DPAs comprising the EDPB have worked together to ensure the consistent enforcement of the GDPR and a harmonised data protection approach across Europe.   A key role in an evolving digital landscape Today, the GDPR is part of a broader and evolving European digital framework, alongside other digital laws such as the Digital Services Act, the Digital Markets Act, and the AI Act . In a world shaped by artificial intelligence, platform economies, and increasing data-driven innovation, the GDPR ensures that technological progress goes hand in hand with the protection of individuals’ fundamental rights . An inspiration for the rest of the world The impact of the GDPR has extended far beyond Europe’s borders, inspiring similar frameworks across the globe and contributing to a growing international recognition of privacy as a fundamental right .   How the GDPR has shaped the data protection landscape: insights from Data Protection Authorities Have you ever wondered what the data protection landscape looked like before the GDPR and how DPAs prepared for its entry into force? How has life for Europeans changed since its adoption? Watch the video for insights and testimonies from Data Protection Authorities which contributed to the shaping of the data protection landscape in Europe.   Sorry, your browser doesn't support embedded","id":2850552,"pubDate":"Mon, 27 Apr 2026 14:14:32 +0200","titre":"Marking 10 years of the GDPR: the evolution of the European data protection landscape"},{"id":2780286,"pubDate":"Tue, 24 Mar 2026 14:08:47 +0100","titre":"EDPB conference on cross-regulatory cooperation: what we learned","description":"Brussels, 23 March - On 17 March 2026, the EDPB conference “Cross-regulatory interplay and cooperation in the EU: a data protection perspective” took place in Brussels. The event showcased high-level discussions, featuring contributions from representatives of key EU institutions, European Data Protection Authorities, academia and industry.  Key takeaways from the panel discussions Throughout the day, three panels were held, focusing on 1) data protection and competition , 2) the Digital Markets Act (DMA) and the GDPR , and 3) the Digital Services Act (DSA) and the GDPR .  During the first panel , speakers emphasised the critical need for cooperation between regulatory bodies in the fields of data protection and competition and shared views on what regulators in the two fields can learn from each other, especially in the aftermath of the Bundeskartellamt ruling. A speaker emphasized that regulators should align their approaches and recognize synergies between the two fields, such as protecting consumers and data subjects. Others pointed out that fixing harm to end users does not always solve competition issues, and that data protection should be considered in competition analysis only when relevant, on a case-by-case basis. Panellists also highlighted the need to cooperate not just on individual cases, but on broader concepts and legal principles.  In this context, the EDPB has recently agreed to develop joint guidelines with the European Commission to address the interplay between competition law and data protection. The discussions in the second panel centred on the joint guidelines on the DMA and the GDPR , which were developed by the European Commission and the EDPB and recently underwent public consultation. The joint guidelines are an unprecedented work and a good example of regulatory cooperation paving the way for further examples ahead, in line with the  EDPB Strategy 2024-2027 and  Helsinki Statement ’s objectives to strengthen cross-regulatory cooperation. A crucial goal of the guidelines is the development of a coherent and compatible interpretation of the DMA and the GDPR while respecting the regulatory competences. It was emphasised that these guidelines help break silos, strengthen consistency, and provide further clarity and legal certainty. All of this contributes to easier compliance, which is valued by stakeholders and increases trust. At the same time, certain speakers suggested improvements to the final version of the guidelines, bearing in mind the DMA should not be given primacy over the GDPR and that the measures companies have to comply with should be proportionate.  Other examples of cooperation in this domain were also mentioned, such as the participation in the High Level Group for the Digital Markets Act and specific instances of cooperation on concrete cases.  The last panel of the day explored how the Digital Services Act (DSA) and the GDPR interact. Panellists provided the example of the protection of minors: age   verification should be effective yet fully in line with data protection legislation.  They highlighted the growing need for strong coordination between the two frameworks, including the role of the European Board for Digital Services and other ways for the Commission and the EDPB to work together. A speaker also underlined the challenges and ongoing work on cross-regulatory cooperation from the perspective of a national authority. Another speaker urged regulators to work on building a fully coherent interpretation of the two frameworks and more globally of the digital legislation. Panellists also stressed that emerging technologies such as artificial intelligence are reshaping online ecosystems and, as a result, the role of the DSA and the GDPR.  The panel concluded with a clear message: online safety under the DSA and the lawful processing of personal data are two sides of the same coin, both calling for the DSA and the GDPR to be read coherently.  Highlights from the keynote speeches The event also","url":"https://www.edpb.europa.eu/news/news/2026/edpb-conference-cross-regulatory-cooperation-what-we-learned_en","source":"EDPB News"}]