[{"titre":"i-Dressup and a data security mess-up","url":"https://www.ftc.gov/business-guidance/blog/2019/04/i-dressup-data-security-mess","pubDate":"Thu, 08 Oct 2026 08:06:59 +0200","source":"FTC USA Business Blog Posts","description":"i-Dressup and a data security mess-up lfair April 24, 2019 | 3:08PM i-Dressup and a data security mess-up By Lesley Fair Kids love to play dress-up, but parents wouldn’t want them rummaging through the attic or climbing to the top shelf of the wardrobe without permission and proper supervision. The i-Dressup.com website offered users – including children – a virtual way to play dress-up and design clothes without those potential dangers. But according to an FTC complaint, Unixiz, Inc. , the company behind i-Dressup, violated the Children’s Online Privacy Protection Act in ways that created different kinds of risks. COPPA puts two separate sets of protections in place to help keep parents in control of personal information collected from their kids online. First, COPPA-covered companies must clearly disclose their information policies and get parental consent before collecting personal information from children under 13. Second, companies must provide reasonable and appropriate security for the data they collect. According to an FTC settlement, i-Dressup fell short on both COPPA requirements. The complaint alleges i-Dressup failed to provide sufficient notice on its site of the information it collected online from kids, how it used it, its disclosure practices, and other specifics required by the COPPA Rule. The company’s direct notices to parents were deficient, too. Among other things, they didn’t include the COPPA-required statement that if parents don’t provide consent within a reasonable time, i-Dressup will delete their online contact information from its records. Stick with the story because that failure turned out to be particularly troubling. In addition to letting users play online games, i-Dressup featured a community where they could “explore their creativity and fashion sense with unique personal profiles” and interact with others. To register, i-Dressup required people to submit a user name, password, birthdate, and email address. If the birthdate indicated the person was under 13, the email field changed to “Parent’s Email.” Once the under-13 user filled in the required fields and clicked “Join Now,” i-Dressup collected the personal information and sent a message to the address entered into the Parent’s Email field. The person receiving the email could consent by clicking the “Activate Now!” button. However, if the parent didn’t give consent, i-Dressup retained the personal information it had collected from the child online. The FTC says the company’s failure to delete that information violated Section 312.5(c)(1) of the COPPA Rule. In addition to violating COPPA’s parental consent provisions, i-Dressup allegedly violated the Rule’s data security requirements . According to the FTC, i-Dressup stored and transmitted users’ personal information (including passwords) in plain text. In addition, the company failed to perform network vulnerability testing of its network, even for well-known threats like SQL attacks; it didn’t implement an intrusion detection and prevention system; and it didn’t monitor for potential security incidents. The upshot? The company learned that a hacker had gained entry to its network and accessed information about 2.1 million users, including approximately 245,000 users who indicated they were under 13. To settle the case , i-Dressup and its owners will pay a $35,000 civil penalty. They’re also prohibited from violating COPPA in the future, and can’t sell, share, or collect any personal information until they implement a comprehensive data security program and get independent biennial assessments. In addition, they’ll have to provide the FTC with an annual certification of compliance. The message for sites and operators covered by COPPA is that an effective system of parental consent is only the first step toward compliance. Section 312.8 of the COPPA Rule also requires you to “establish and maintain reasonable","id":3203250},{"description":"FTC consumer protection year in review offers 2020 vision for your business lfair January 8, 2020 | 9:26AM FTC consumer protection year in review offers 2020 vision for your business By Lesley Fair They say hindsight is 20/20, but what about foresight? We’re not ones to prognosticate, but a look at notable FTC cases and initiatives from the past year suggests some topics likely to be top of mind in months to come. Here is a non-exhaustive list of issues in our 2019 rearview mirror and likely visible through the 2020 windshield. Consumer privacy. The FTC’s $5 billion enforcement action against Facebook made history and headlines, but the other notable part of the case is the monumental change the order mandates to Facebook’s privacy ecosystem. The Commission opinion in Cambridge Analytica reaffirms the proposition that like any other claim, a company’s privacy promises are viewed through the lens of established FTC consumer perception principles. A series of cases demonstrates the agency’s continued commitment to challenging false or misleading representations about businesses’ compliance with the EU-U.S. Privacy Shield Framework. Another important development is the FTC’s proposed settlement with Retina-X . It’s our first action against a marketer of stalking apps – software that allowed purchasers to monitor the mobile devices on which they’re installed, without users’ knowledge. COPPA. Congress passed the Children’s Online Privacy Protection Act to ensure that when it comes to the collection of kids’ personal information online, parents are in the driver’s seat. The FTC settlement with YouTube – brought in conjunction with the New York Attorney General – alleges that the company collected kids’ personal data without parental consent, in violation of the COPPA Rule . The $170 million civil penalty broke the record for the largest remedy in an FTC COPPA case, set months before in our $5.7 million settlement with Musical.ly , now known as TikTok. If you’re a YouTube channel owner, read a special Business Blog post for tips on determining if your content is directed to children. Data security. Is your company honoring its data security promises and taking reasonable steps to safeguard the sensitive information in its possession? The FTC, CFPB, and State AG actions against Equifax illustrate how consumers are injured when companies ignore reasonably foreseeable threats. The settlement, which totals between $575 million and $700 million – also reminds businesses that heeding warnings about known risks is more prudent (and cost-effective) than the alternative. Three threads tie together the FTC’s unrelated actions against LightYear Dealer Technologies and InfoTrax Systems . They both sell management software to specific industries. They both allegedly failed to take reasonable steps to secure their networks, resulting in damaging data breaches. And they’re both covered by similar new orders the FTC has introduced in recent data security cases. If you or your clients are players in the Internet of Things, the settlement of the FTC’s litigation against connected device company D-Link sends an unmistakable message: The future of the IoT marketplace depends on secure software development. Endorsements, certifications, and influencers. Why is the FTC concerned about the accuracy of endorsements and certifications? Because they’re material to consumers. The FTC says Truly Organics’ claim that its personal care products were “certified organic” lathered up a double bubble of deception. First, its merchandise contained ingredients that weren’t organic. Second, the company falsely claimed that its products were certified by USDA’s National Organic Program. Other FTC developments focused on the use of endorsements in social media. The FTC’s action against Devumi alleges the company sold fake followers, phony subscribers, and bogus","id":3203247,"source":"FTC USA Business Blog Posts","titre":"FTC consumer protection year in review offers 2020 vision for your business","url":"https://www.ftc.gov/business-guidance/blog/2020/01/ftc-consumer-protection-year-review-offers-2020-vision-your-business","pubDate":"Thu, 08 Oct 2026 08:06:58 +0200"},{"pubDate":"Tue, 06 Oct 2026 08:06:23 +0200","url":"https://www.ftc.gov/business-guidance/blog/2019/03/nixing-fix-warranties-mag-moss-restrictions-repairs","titre":"Nixing the Fix: Warranties, Mag-Moss, and restrictions on repairs","source":"FTC USA Business Blog Posts","id":3199073,"description":"Nixing the Fix: Warranties, Mag-Moss, and restrictions on repairs lfair March 18, 2019 | 10:24AM Nixing the Fix: Warranties, Mag-Moss, and restrictions on repairs By Lesley Fair First, the bad news: That nifty purchase needs a repair. Now the good news for consumers: It’s still under warranty. But where can they go to get it fixed? Can the manufacturer restrict a consumer’s ability to go to the independent repair shop of their choice? Can the manufacturer use glue, non-standard screws, and proprietary diagnostic software that make it difficult for independent repair shops to fix things? Do limitations like these affect consumers’ rights under the Magnuson-Moss Warranty Act ? That’s the topic of Nixing the Fix: A Workshop on Repair Restrictions , an FTC event scheduled for July 16, 2019 . Enforced by the FTC, the Magnuson-Moss Warranty Act helps consumers make informed buying decisions and gives them access to remedies if the widget starts to fidget during the warranty period. One key consumer protection under Mag-Moss is that the law prohibits manufacturers from conditioning warranty coverage on the use of particular products or services. Here are some of the questions FTC staff intends to ask at Nixing the Fix : What’s the interplay between repair restrictions and the Magnuson-Moss Warranty Act’s anti-tying provision, which establishes that manufacturers can’t condition coverage on the use of parts or services identified by brand, trade, or corporate name? Do repair restrictions affect the market for extended warranties and service agreements? What types of restrictions are consumers running into when they try to get their stuff repaired? Are manufacturers’ restrictions having an impact on small fix-it businesses? Are manufacturers using software that may render products obsolete or unfixable if consumers engage in DIY or go to a local repair shop? Are repair restrictions necessary to reduce the risk of physical injury or to protect manufacturers from liability for products improperly repaired by others? Do consumers understand the effects of repair restrictions? We’re also looking for empirical research and data about the prevalence and impact of manufacturers’ repair restrictions. For example, what can you tell us about code that disables products that have been repaired by someone other than the manufacturer, product designs that make third-party repairs difficult (like attaching batteries with glue only the manufacturer can remove), contractual post-sale or licensing restrictions, or proprietary diagnostic software and replacement parts? Please send us your research and data by April 30, 2019. Do you have suggestions about possible panelists? Email us at nixingthefix@ftc.gov . Nixing the Fix will take place on July 16th at the FTC’s Constitution Center conference facility, 400 7th Street, S.W., in Washington, DC. It’s free and open to the public. You can file public comments online and we’ll keep the record open until September 16, 2019. Follow the Business Blog for more information about the agenda and for watch-the-webcast instructions."},{"id":3199075,"description":"First Consumer Review Fairness case takes on promoter’s “big bucks on Amazon” claim lfair August 6, 2018 | 11:11AM First Consumer Review Fairness case takes on promoter’s “big bucks on Amazon” claim By Lesley Fair T he marketers behind a purported money-making promotion called Sellers Playbook appear to have skipped the chapter about complying with federal and state consumer protection laws. That’s the allegation in a complaint filed by the FTC and the Minnesota Attorney General . In addition, it’s the FTC’s first case charg ing violations of the Consumer Review Fairness Act. The roots of the allegations go back to another venture sued by the FTC earlier this year: FBA Stores, also known as Amazing Wealth System and Amazon Wealth Systems. The defendants in that case ran online ads and in-person workshops that claimed to reveal the secret s of making major money on Amazon. But few, if any, of the consumers who forked over thousands of dollars and implemented their “plug-and-play systems” earn ed the kind of cash the defendants claimed. Which brings us to Sellers Playbook, Exposure Marketing, Jessie Conners Tieva, and Matthew Tieva – Minnesota-based defendants charged with pitching the same kind of “secrets” to making big bucks on Amazon . According to the just-filed lawsuit , the striking similarities should come as no surprise. That ’s because defendant Jessie Tieva was a regular speaker at Amazing Wealth Systems’ workshops. How successful was she in getting consumers to sign up? The complaint charges that Ms. Tieva and her team generated more than $3.4 million in sales for Amazing Wealth Systems. And let’s be clear: We’re not talking about $3.4 million in sales by consumers who successfully implemented the system. We mean $3.4 million that consumers shelled out to the operators of Amazing Wealth Systems for which Tieva was paid a handsome commission. The complaint alleges that the new Sellers Playbook venture is, in effect, a copycat of the now-defunct Amazing Wealth Systems operation. The earning claims certainly have a familiar ring to them. Here’s how Sellers Playbook touted their “opportunity”: “Holy cow, guys. That’s when you start seeing the returns of what we want you to have, $20,000 a month,” “Potential Net Profit: $1,287,463.38,” “Starting with $1000...1 year later over $210,000,” and “How many of you would like to learn how to turn a $5- to $10,000 investment into a $25- to a $1.2 million return with your investment? Yeah. And you’re going to learn those strategies before you leave here today. There are a few other things Amazon Wealth Systems and Sellers Playbook have in common: 1) Neither company has any affiliation with Amazon; and 2) Both companies charged consumers hundreds of dollars – or even hefty five-figure fees – to sign up. Of course, few consumers make the kind of earnings the defendants claimed. According to the complaint, many of the webpages promoting Sellers Playbook contained an inconspicuous earnings disclaimer in grey near the bottom of the page. What’s more, at a live event, the defendants briefly displayed this slide, which one of the presenters downplayed with this statement: “That’s why they have us do this again. It makes the lawyers happy, disclaimers. But you got to do your part. Money’s not going to fall from the sky. But as long as you do a part, it’s going to happen.” T he complaint challenges the defendants’ earning claims as false or unsubstantiated under FTC law and the Minnesota Prevention of Consumer Fraud Act. What’s more, the lawsuit alleges multiple violations of the FTC’s Business Opportunity Rule . The FTC and the AG also charge that provisions in the defendants’ form contracts try to restrict consumers’ ability to post reviews of their products, services, or conduct , in violation of the Consumer Review Fairness","source":"FTC USA Business Blog Posts","pubDate":"Tue, 06 Oct 2026 08:06:23 +0200","url":"https://www.ftc.gov/business-guidance/blog/2018/08/first-consumer-review-fairness-case-takes-promoters-big-bucks-amazon-claim","titre":"First Consumer Review Fairness case takes on promoter’s “big bucks on Amazon” claim"},{"titre":"Two on the aisle for FTC’s “That’s the Ticket” workshop","url":"https://www.ftc.gov/business-guidance/blog/2019/06/two-aisle-ftcs-thats-ticket-workshop","pubDate":"Mon, 05 Oct 2026 14:07:45 +0200","description":"Two on the aisle for FTC’s “That’s the Ticket” workshop lfair June 6, 2019 | 10:40AM Two on the aisle for FTC’s “That’s the Ticket” workshop By Lesley Fair Humphrey Bogart said it in “The African Queen” and it was a catchphrase popularized by Jon Lovitz on “Saturday Night Live.” But to the FTC, That’s the Ticket is the name of a June 11, 2019, workshop to explore consumer protection issues related to online ticket sales – and the agenda is out now. Consumers who try to buy tickets online to a concert, theatrical performance, or sporting event have often expressed frustration with the process. That’s the Ticket will bring together advocates, industry members, academics, and law enforcers to explore the topic from the consumer’s perspective. FTC Commissioner Slaughter will open the event at 9:30 ET. Next on the agenda: Professor Eric Budish from the University of Chicago’s Booth School of Business, who will share his insights into the issues. The first panel will explore Bots and the BOTS Act . Passed in 2016, the Better Online Ticket Sales Act makes it illegal to “circumvent a security measure, access control system, or other technological control or measure on an Internet website or online service that is used by the ticket issuer to enforce posted event ticket purchasing limits or to maintain the integrity of posted online ticket purchasing order rules.” The next panel will address Other Consumer Protection Issues Around Ticket Availability . After a mid-day break, the topic will turn to The Adequacy of Ticket Price and Fee Disclosures . Do consumers have accurate information about how much they’ll be charged? The last panel of the afternoon will consider Consumer Confusion: What and From Whom Am I Buying? Do buyers have a clear picture of what they’re getting and the identity of the seller? Mary Engle, Director of the FTC’s Division of Advertising Practices, will offer closing remarks. Ironically enough, you don’t need a ticket to attend That’s the Ticket , which will take place on June 11th at the FTC’s Constitution Center conference facility, 400 7th Street, S.W., in Washington, DC. The event is free and open to the public or you can watch via webcast, which will go live moments before the 9:30 ET starting time on the That’s the Ticket event page. We’ll also live tweet using the hashtag #FTCticket.    ","id":3198174,"source":"FTC USA Business Blog Posts"},{"source":"FTC USA Business Blog Posts","id":3197413,"description":"New FTC warning letters cite unsupported Coronavirus-related health and earnings claims sgressin April 24, 2020 | 12:44PM New FTC warning letters cite unsupported Coronavirus-related health and earnings claims By Seena Gressin The FTC is not the pen pal you want if you operate a multi-level marketing company but aren’t closely monitoring your distributors. In its latest round of warning letters, the FTC warns ten MLM companies that they are responsible for the claims made by their participants. The letters direct the companies to report within 48 hours what actions they’ve taken to stop their distributors from claiming their products can treat or prevent Coronavirus disease, that MLM business opportunity participants are likely to earn substantial income, or both. The FTC says that the health and earnings claims are unsubstantiated and therefore violate truth-in-advertising laws. The products at issue are not scientifically proven to treat or prevent COVID-19, the disease that Coronavirus causes. The FTC previously has sent warning letters to companies about their Coronavirus-related health claims, but the new letters are the first to also target claims about potential business opportunity earnings. The letters come at a time when millions of people are out of work and facing financial challenges as a result of the pandemic. MLM companies rely on a network of independent distributors, sometimes called business opportunity participants, to buy and resell their products, often through direct person-to-person sales or online. MLMs typically offer participants a cut of the sales made by people the participant recruits to invest in the business opportunity. The new recruits then try to sell the products, and try to recruit more people to do the same. Most people who join MLMs make little or no money. According to the FTC, distributors of the MLM companies receiving the letters have posted promotional messages on Facebook, Instagram, and other social media sites. Health claims the FTC letters cite include: “STAY SAFE!! MAKE YOUR IMMUNE SYSTEM STRONG!!!” Standard coronavirus protection kit . #antiseptics and #immunity_support.” “HOW WILL YOU FIGHT OFF CORONA? USE NUTRABURST-CHAGA- .... #coronacure #coronaprevention ... #immunesupport #immunebooster ... #immunesystembooster” “Got the coronavirus heebeegeebees? Boost your immunity with this amazing deal!!!!” “... If interested to learn more or obtain oils or rollers Let me know A little extra protection can help #doterra #NursesCOVID19 #Dialysis #ImmunityBoosters #ImproveRespiratoryFunction” Earnings claims the FTC letters cite include: “...Living in quarantine and where 14 million people applied for unemployment just last week ... I’ll stick with the opportunity to change people’s lives ... turn a small investment into six figures .... #arbonne ... #quarantine #2020” “Need to make extra money? Find it difficult to pay your bills? Were you laid off/ #fired? Be your own Boss w/doTERRA essential oils. Msg me to achieve financial independence #laidoff #unemployed #cantpaymybills #cantpaymyrent #student #sales #sidehustle #makemoney #stayathomemom.” “[E]veryone’s getting stimulus checks right now... There is no better investment you could do... Take that money that you’re about to get back... figure out a way to make this happen tonight.” In the letters alleging unsubstantiated health claims, FTC staff reminds the companies that, under the FTC Act, claims that a product can prevent, treat, or cure a serious disease require the support of well-controlled human clinical studies. Because “no such study is currently known to exist” for the advertised products, the FTC says the companies “must immediately cease making all such claims.” In the letters alleging deceptive earnings claims, FTC staff reminds the companies that under the FTC Act, “claims about the potential to achieve a wealthy lifestyle, career-level income, or significant","pubDate":"Mon, 05 Oct 2026 08:07:08 +0200","url":"https://www.ftc.gov/business-guidance/blog/2020/04/new-ftc-warning-letters-cite-unsupported-coronavirus-related-health-earnings-claims","titre":"New FTC warning letters cite unsupported Coronavirus-related health and earnings claims"},{"pubDate":"Fri, 25 Sep 2026 08:10:48 +0200","url":"https://www.ftc.gov/news-events/news/press-releases/2026/09/ftc-seeks-public-comment-whether-update-rule-impersonation-government-businesses-address-platforms","titre":"FTC Seeks Public Comment on Whether to Update Rule on Impersonation of Government and Businesses to Address Platforms’ Role in Promoting Impersonation Scams","id":3176041,"description":"The Federal Trade Commission announced today that is considering whether to update its Rule on Impersonation of Government and Businesses or take other action to prevent online platforms from engaging in ad-optimization practices that may be furthering impersonation scams. In an Advance Notice of Proposed Rulemaking (ANPRM) to be published in the Federal Register , the FTC is seeking comment on the extent to which ad-optimization tools and services offered by social media, search engines and other digital marketplace platforms further efforts by scammers to impersonate legitimate businesses and government agencies using online ads.  “Free markets depend on trust, transparency and consumers’ ability to make informed choices. Impersonation scams—especially when amplified by digital platforms that profit from them—do more than rob Americans of their hard-earned money,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “They erode the very foundation that allows competitive markets to function. Today’s impersonation scams are no longer the work of isolated con artists; they are sophisticated, highly engineered operations powered by the same advertising and targeting tools that platforms sell to legitimate businesses. Consumers reported nearly $3.5 billion in losses to impersonation fraud last year, and the true cost is likely far higher. “The Commission’s mission has always been to safeguard the conditions under which competitive markets can thrive. Increasingly, consumers rely on a small number of dominant digital platforms for everyday transactions—from shopping, banking and travel bookings to accessing government services. Yet these platforms are the very places fraudsters seek out consumers, exploiting their trust while platforms profit from optimizing and disseminating scam ads. “Today’s advance notice of proposed rulemaking asks whether the Commission should require platforms to take concrete steps to prevent impersonation ads from ever reaching consumers. By exploring potential new obligations platforms would have to follow, the rulemaking aims to ensure that Americans participate in an online economy where truthful information guides consumer choice.”  Impersonation scams have topped the list of fraud complaints reported to the FTC by consumers in recent years. In 2025, the FTC received more than 1 million reports about imposter scams from consumers, who reported losing nearly $3.5 billion to such scams. In addition, online platforms play an important role in many scams. For example, nearly 30% of consumers who reported losing money to scammers in 2025 said they were first contacted on social media platforms, with reported losses reaching $2.1 billion. The ANPRM notes that impersonation scams have been amplified by search engines, social media and other digital marketplace platforms that profit from optimizing online ads for third parties, regardless of whether the third parties are legitimate. The ANPRM seeks comment on a wide range of topics related to the use of these ad-optimization tools and services and the proliferation of ads that impersonate businesses and government agencies including:  The financial incentives driving these platforms to offer ad-optimization tools and services, details on how each tool and service optimizes the content and delivery of the ad, and the steps platforms currently take to prevent the use of such tools and services for deceptive advertising The extent to which these platform ad-optimization tools and services constitute unfair or deceptive acts or practices by furthering impersonation scams Whether these unfair or deceptive acts or practices are prevalent in the marketplace and whether the Commission should address these acts or practices by amending the existing Impersonation Rule, proposing a new separate rule or implementing non-regulatory Measures Measures the Commission could consider in crafting any new regulations, including vetting","source":"Federal Trade Commission - Protecting America's Consumers"},{"pubDate":"Wed, 01 Jul 2026 08:09:43 +0200","url":"https://www.ftc.gov/news-events/news/press-releases/2026/06/ftc-requires-amazon-pay-225-million-resolve-charges-it-knowingly-violated-fair-credit-reporting-act","titre":"FTC Requires Amazon to Pay $2.25 Million to Resolve Charges It Knowingly Violated the Fair Credit Reporting Act","id":2997627,"description":"Amazon will pay $2.25 million in civil penalties to settle Federal Trade Commission allegations that the online retail giant knowingly violated the Fair Credit Reporting Act (FCRA) by refusing to provide transaction records to consumers whose personal information was used by identity thieves to commit fraud. The complaint , filed by the Department of Justice upon notification and referral from the FTC, alleged that in numerous instances, Amazon.com Inc. failed to comply with Section 609(e) of the FCRA, which requires companies to, within 30 days of a consumer’s request, provide victims of identity theft with application and business transaction records about fraudulent transactions made in their names. According to the complaint, Amazon had no written policy to respond to Section 609(e) requests until early 2025, after it learned of the FTC’s investigation, despite prior outreach from FTC staff advising the company to review its compliance with Section 609(e). “Amazon often put identity theft victims through a Kafkaesque ordeal by demanding they identify the thief who stole their information before Amazon would release the records the law entitles them to—records that could help victims protect themselves and recover from the fraudulent conduct,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “The FTC will not allow companies to simply ignore their legal obligations, especially those designed to support and protect identity theft victims.” Many consumers who contacted Amazon to report fraud were told by its customer service agents that they could not provide the requested records for “security” or “privacy” reasons, the complaint alleged. For example, one consumer reported that when they contacted Amazon seeking business records related to unauthorized charges stemming from a fraudulent account, a company representative said they could not share details about the other account that had used the consumer’s credit card for “security reasons” unless the consumer guessed the name on the account (the name used by the identity thief), which the consumer was unable to do after making 30 attempts. The complaint alleged that in other instances, Amazon agents told consumers they were not able to access the requested records. Amazon even refused to provide application and business transaction records to law enforcement agencies who had been authorized to, and who did, submit requests to Amazon on behalf of consumers who were victims of identity theft. Some frustrated consumers resorted to sending copies of the FCRA and FTC guidance to Amazon in hopes of receiving the requested records, but Amazon still failed to comply with the law. The complaint also alleged that in some cases where Amazon ultimately provided requested records, it failed to respond to consumers within the 30-day timeframe required by the FCRA. In addition to the $2.25 million civil penalty—a record for a Section 609(e) violation—the proposed order will prohibit Amazon from failing to comply with Section 609(e) of the FCRA, requiring the company to provide the records lawfully requested by identity theft victims and law enforcement agencies acting on their behalf. The order also requires Amazon to provide notice to consumers about how identity theft victims can request records under the FCRA. The company must also contact consumers who had requested records since April 2024 from Amazon but did not receive them to inform these consumers that it may have additional records and that the consumers may request those records from Amazon. This is the second case the FTC has brought using its authority under Section 609(e) of the FCRA. The FTC announced its first case involving a violation of Section 609(e) of the FCRA in 2020 against Kohl’s Department Stores Inc . The Commission voted 2-0 to authorize the staff to refer the complaint to the DOJ and to approve the proposed stipulated order. The DOJ filed the complaint and final","source":"Federal Trade Commission - Protecting America's Consumers"},{"source":"Federal Trade Commission - Protecting America's Consumers","description":"The Federal Trade Commission today announced it is seeking public comment on whether a rule is needed to address unfair or deceptive fee practices in connection with the services provided by online food and grocery delivery platforms nationwide. As detailed in an Advance Notice of Proposed Rulemaking (ANPRM) to be published shortly in the Federal Register, the FTC is seeking written comments, including data, evidence, analyses, and arguments, to help determine how best to prevent unfair or deceptive acts or practices and to ensure that the agency addresses concerns from both consumers and industry. “Online grocery fees that are unclear, inconsistently disclosed, or revealed only at the last moment before consumers make a purchase distort competition and harm consumers,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “Clear and truthful pricing is essential to competitive markets. The Commission’s enforcement track record suggests that consumers continue to face a suite of fees that prevent them from making informed comparisons. The Trump-Vance FTC is committed to addressing unlawful grocery delivery pricing that obscures the true cost of groceries.” Unfair or deceptive fee practices violate the FTC Act. The Commission recently brought several actions against online food delivery platforms for unfair or deceptive practices that violated the FTC Act. For example, in December 2025, the FTC announced a $60 million settlement with  Instacart over allegations it falsely advertised “free delivery” on consumers’ first three orders on the platform and then charged them service fees that were not disclosed until checkout. And, in December 2024, the FTC obtained a $25 million settlement with  GrubHub over allegations it misled consumers about the cost of delivery on its platform. These cases illustrate that hidden and misleading fees and charges are a recurring problem related to online delivery platforms, despite enforcement actions to protect consumers’ interests. Also, while numerous states have recently adopted laws requiring food and grocery delivery platforms to more clearly disclose fees and include all mandatory fees in advertised prices, they have not adopted uniform rules that apply to all food delivery platforms across the country. The ANPRM asks the public to comment on whether a rule is needed to prevent unfair or deceptive fee practices in connection with online food delivery services including: Total Price. Do food delivery platforms clearly and conspicuously disclose the total price for food or grocery items ordered for local delivery or pickup? Fees and Charges. Do online food delivery platforms clearly and conspicuously disclose the existence, nature, purpose, refundability, or recipient of any fees, charges, or other costs for a delivery or pickup order? Variable or Contingent Fees . Do online food delivery platforms clearly and conspicuously disclose factors used to determine any fees, charges, or other costs that are variable or contingent on consumer selections, such as number or type of items bought or delivery location? Material Restrictions. Do online food delivery platforms clearly and conspicuously disclose whether fees, charges, or other costs are mandatory or optional, or any material restrictions, limitations, or restrictions that may result in additional charges or that may diminish the consumer’s use of the good or service? Price Differentials. Do online food delivery platforms clearly and conspicuously disclose whether the prices of items ordered are the same as, or different from, the prices of the same items offered in the store or restaurant? Personalized Pricing.  Do online food delivery platforms clearly and conspicuously disclose whether the prices of items ordered are the same as, or different from, the prices of the same items offered to other consumers on the platform? Discounts or Promotions. Do online food delivery platforms clearly and conspicuously disclose material","id":2826725,"titre":"FTC Seeks Public Comment on Unfair and Deceptive Fee Practices in Online Food and Grocery Delivery Services","url":"https://www.ftc.gov/news-events/news/press-releases/2026/04/ftc-seeks-public-comment-unfair-deceptive-fee-practices-online-food-grocery-delivery-services","pubDate":"Wed, 15 Apr 2026 08:10:57 +0200"},{"source":"Federal Trade Commission - Protecting America's Consumers","id":2818173,"description":"StubHub, the nation’s largest ticket exchange and resale ticket provider, will pay $10 million to settle Federal Trade Commission charges that the company violated the FTC Act and the agency’s Rule on Unfair or Deceptive Fees by deceptively advertising ticket prices on its website without clearly and conspicuously disclosing up-front how much consumers actually would pay, including all mandatory fees. “The Commission’s Fees Rule makes it very clear that the total price of live-event tickets must be disclosed up-front to enable consumers to make fully informed purchasing decisions,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “Price transparency is essential to a free and competitive marketplace. Today’s settlement underscores the Commission’s commitment to ensuring that consumers pay the price they are promised.” The FTC’s action against StubHub Holdings, Inc., follows a  warning letter the agency sent the online ticket platform in May 2025 stating that multiple prices displayed on its website appeared to be in violation of the Fees Rule. Under the Rule, which took effect on May 12, 2025 , it is an unfair and deceptive practice for any business to offer, display, or advertise the price of a live-event ticket without clearly, conspicuously, and most prominently disclosing the total price, which the Rule defines as “the maximum total of all fees or charges a consumer must pay for any good(s) or service(s) and any mandatory ancillary good or service.” Misrepresenting prices also violates the FTC Act. Today’s action also follows the Administration’s recent Executive Order on Ticketing , which includes a directive for the FTC to “take appropriate action . . . to ensure price transparency at all stages of the ticket-purchase process, including the secondary ticketing market.” According to the Commission’s complaint , in mid-May 2025—after the Rule went into effect—StubHub advertised its ticket prices without disclosing the full price consumers would actually pay by failing to include mandatory fees and to disclose the total price everywhere it displayed prices. Specifically, the FTC alleges StubHub failed to provide the total price for tickets—including high-demand National Football League tickets in the lead-up to when the NFL schedule was announced on May 14, 2025—in the first three pricing displays on its website. On the initial two pricing displays, in numerous instances, the advertised price did not include all mandatory fees, and StubHub did not disclose the total price. On the third pricing display, StubHub listed multiple fees and charges but did not disclose the total price. The proposed order settling StubHub’s alleged violations of the FTC Act and the Fees Rule requires the company to pay $10 million, which the company will use to provide monetary relief to eligible consumers through a settlement and consumer redress distribution program. The order also prohibits StubHub from misrepresenting the total price of any good or service; any fee or charge, including its nature, purpose, amount, or refundability, as well as why the fee or charge is being imposed; the final payment amount for any transaction; and any other material fact including those related to refunds or cancellations. The proposed order also prohibits StubHub from: Offering, displaying, or advertising any price of a good or service without clearly and conspicuously disclosing the total price; Failing to disclose the total price more prominently than any other pricing information; Failing to clearly and conspicuously disclose the amount of any fees or charges that have been excluded from the total price and what they are for, as well as the final payment amount—before the consumer agrees to pay for a product or service; and Violating the Commission’s Fees Rule. Within 90 days of the date of the order StubHub must provide redress to two groups of eligible","pubDate":"Fri, 10 Apr 2026 08:08:44 +0200","titre":"StubHub Refunding $10 Million in Fees to Consumers After Deceptive Ticket Pricing","url":"https://www.ftc.gov/news-events/news/press-releases/2026/04/stubhub-refunding-10-million-fees-consumers-after-deceptive-ticket-pricing"},{"source":"EDPB News","description":"Brussels, 23 March - On 17 March 2026, the EDPB conference “Cross-regulatory interplay and cooperation in the EU: a data protection perspective” took place in Brussels. The event showcased high-level discussions, featuring contributions from representatives of key EU institutions, European Data Protection Authorities, academia and industry.  Key takeaways from the panel discussions Throughout the day, three panels were held, focusing on 1) data protection and competition , 2) the Digital Markets Act (DMA) and the GDPR , and 3) the Digital Services Act (DSA) and the GDPR .  During the first panel , speakers emphasised the critical need for cooperation between regulatory bodies in the fields of data protection and competition and shared views on what regulators in the two fields can learn from each other, especially in the aftermath of the Bundeskartellamt ruling. A speaker emphasized that regulators should align their approaches and recognize synergies between the two fields, such as protecting consumers and data subjects. Others pointed out that fixing harm to end users does not always solve competition issues, and that data protection should be considered in competition analysis only when relevant, on a case-by-case basis. Panellists also highlighted the need to cooperate not just on individual cases, but on broader concepts and legal principles.  In this context, the EDPB has recently agreed to develop joint guidelines with the European Commission to address the interplay between competition law and data protection. The discussions in the second panel centred on the joint guidelines on the DMA and the GDPR , which were developed by the European Commission and the EDPB and recently underwent public consultation. The joint guidelines are an unprecedented work and a good example of regulatory cooperation paving the way for further examples ahead, in line with the  EDPB Strategy 2024-2027 and  Helsinki Statement ’s objectives to strengthen cross-regulatory cooperation. A crucial goal of the guidelines is the development of a coherent and compatible interpretation of the DMA and the GDPR while respecting the regulatory competences. It was emphasised that these guidelines help break silos, strengthen consistency, and provide further clarity and legal certainty. All of this contributes to easier compliance, which is valued by stakeholders and increases trust. At the same time, certain speakers suggested improvements to the final version of the guidelines, bearing in mind the DMA should not be given primacy over the GDPR and that the measures companies have to comply with should be proportionate.  Other examples of cooperation in this domain were also mentioned, such as the participation in the High Level Group for the Digital Markets Act and specific instances of cooperation on concrete cases.  The last panel of the day explored how the Digital Services Act (DSA) and the GDPR interact. Panellists provided the example of the protection of minors: age   verification should be effective yet fully in line with data protection legislation.  They highlighted the growing need for strong coordination between the two frameworks, including the role of the European Board for Digital Services and other ways for the Commission and the EDPB to work together. A speaker also underlined the challenges and ongoing work on cross-regulatory cooperation from the perspective of a national authority. Another speaker urged regulators to work on building a fully coherent interpretation of the two frameworks and more globally of the digital legislation. Panellists also stressed that emerging technologies such as artificial intelligence are reshaping online ecosystems and, as a result, the role of the DSA and the GDPR.  The panel concluded with a clear message: online safety under the DSA and the lawful processing of personal data are two sides of the same coin, both calling for the DSA and the GDPR to be read coherently.  Highlights from the keynote speeches The event also","id":2780286,"titre":"EDPB conference on cross-regulatory cooperation: what we learned","url":"https://www.edpb.europa.eu/news/news/2026/edpb-conference-cross-regulatory-cooperation-what-we-learned_en","pubDate":"Tue, 24 Mar 2026 14:08:47 +0100"},{"pubDate":"Thu, 09 Oct 2025 15:53:21 +0200","url":"https://www.edpb.europa.eu/news/news/2025/dma-and-gdpr-edpb-and-european-commission-endorse-joint-guidelines-clarify-common_en","titre":"DMA and GDPR: EDPB and European Commission endorse joint guidelines to clarify common touchpoints","id":2425502,"description":"Brussels, 09 October - The European Data Protection Board (EDPB) and the European Commission endorsed joint guidelines on the interplay between the Digital Markets Act (DMA) and the General Data Protection Regulation (GDPR) . These are the first joint guidelines by the Board and the European Commission. In line with its 2024-2027 Strategy and the recent Helsinki Statement’s objectives to make GDPR compliance easier and strengthen consistency, the EDPB has cooperated with the European Commission, each within their respective mandates, to facilitate the coherent application of the DMA*and GDPR and to increase legal certainty for gatekeepers, business users, beneficiaries and individuals. EDPB Chair Anu Talus said:   “These joint guidelines are the result of a fruitful cooperation between the EDPB and the European Commission. This is the first time that the EDPB and the European Commission prepare guidelines jointly. This approach maximises usefulness of the guidance by simplifying compliance for businesses and bringing enhanced legal certainty to them.  The guidelines will help gatekeepers, business users and individuals to better understand their obligations and rights under the DMA, and ensure a consistent, effective and complementary application of the DMA and EU data protection law.” How the DMA and the GDPR interact The DMA and the GDPR both protect individuals in the digital landscape , but their goals are complementary as they address interconnected challenges: individual rights and privacy in case of the GDPR and fairness and contestability of digital markets under the DMA.    Several activities regulated by the DMA entail the processing of personal data by gatekeepers and, in several provisions, the DMA explicitly refers to definitions and concepts included in the GDPR. The joint guidelines clarify how gatekeepers can implement these DMA provisions in accordance with EU data protection law . For example, the EDPB and the Commission specify which elements gatekeepers should consider in order to comply with the requirements of specific choice and valid consent under Art. 5(2) DMA and the GDPR, and thus to lawfully combine or cross-use personal data in core platform services. The EDPB and the Commission also address other provisions including those related to the distribution of third party apps and stores, data portability, data access requests and interoperability of messaging services.   Next steps The Board and the Commission have just launched a joint public consultation on the first version of the guidelines which will be open until 4 December 2025 .  This will be an opportunity for stakeholders to comment and provide feedback. All submissions will be published on the DMA website to which a link will be included on the EDPB website, after the consultation period has closed. The final text, incorporating input received during the consultation, will be prepared jointly by the Board and the Commission, and will be adopted by the EDPB and European Commission.   More guidelines on the way Following these first joint guidelines with the Commission, further work is underway to clarify the new cross-regulatory landscape and maintain coherent and consistent safeguards for the protection of personal data. In this regard, the EDPB is working with the Commission, specifically with the AI Office, on joint guidelines on the interplay between the AI Act and EU data protection laws. Note to editors: The Digital Markets Act is one of the first regulatory tools that aims to tackle unfair practices of gatekeepers in digital markets. Gatekeepers are large digital platforms providing core platform services, such as online search engines, app stores, and messenger services. The main objective of the DMA is to make the markets in the digital sector fairer and more contestable. ","source":"EDPB News"},{"source":"EDPB News","description":"Brussels, 12 September - During its September plenary meeting, the European Data Protection Board (EDPB) has adopted guidelines on the interplay between the Digital Services Act (DSA) and the General Data Protection Regulation (GDPR) . These are the first set of EDPB guidelines on the interplay between the GDPR and the EU’s recently adopted digital laws. The DSA aims to complement the rules of the GDPR to ensure the highest level of protection of fundamental rights in the digital space. Its main goal is to create a safer online environment in which the fundamental rights of all users, including the right to freedom of expression, are protected. It applies to online intermediary services , such as search engines and platforms. Several provisions included in the DSA entail the processing of personal data by intermediary service providers. The EDPB guidelines contribute to the consistent application of the DSA and of the GDPR, insofar as some provisions of the DSA concern the processing of personal data by intermediary service providers and include references to GDPR concepts and definitions. While it is up to the competent authorities under the DSA - with the support of the European Board for Digital Services and EU courts - to interpret the DSA, there are a number of provisions which relate to the GDPR. These include: notice-and-action systems that help individuals or entities report illegal content recommender systems used by online platforms to automatically present specific content to the users of the platform with a certain relative order or prominence the provisions to ensure a high level of privacy, safety, and security of minors and prohibiting that profile-based advertising using their data is presented to them transparency of advertising by online platforms prohibition of profiling-based advertising using special categories of data  The EDPB guidelines help to understand how the GDPR should be applied in the context of DSA obligations. The EDPB also provides practical guidance relating to the cross-regulatory cooperation between authorities to coordinate enforcement which will provide more legal certainty for intermediary service providers and ultimately to protect the rights and freedoms of individuals. The guidelines will be subject to public consultation, providing stakeholders with the opportunity to comment and provide feedback. EDPB Chair Anu Talus said: “By clarifying the interplay between the DSA and the GDPR, these guidelines mark a significant step towards ensuring a coherent and effective EU digital rulebook, and they will help uphold the fundamental rights and freedoms of individuals. I hope that stakeholders, including the competent authorities under the DSA, will make the most of the opportunity to contribute to the public consultation\". More work in the pipeline Following these first guidelines on the interplay between the GDPR and the DSA, further work is underway with other regulators to clarify the new cross-regulatory landscape and maintain coherent and consistent safeguards for the protection of personal data. In this regard, the EDPB is working on joint guidelines with the European Commission on the interplay between the Digital Markets Act (DMA) and the GDPR, as well as on joint guidelines on the interplay between the AI Act and EU data protection laws.","id":2368407,"url":"https://www.edpb.europa.eu/news/news/2025/interplay-between-dsa-and-gdpr-edpb-adopts-guidelines_en","titre":"Interplay between the DSA and the GDPR: EDPB adopts guidelines","pubDate":"Fri, 12 Sep 2025 15:51:31 +0200"}]