[{"id":3198177,"pubDate":"Mon, 05 Oct 2026 14:07:45 +0200","titre":"FTC, Florida AG to small business: Scrutinize “o-fishy-al” invoices","description":"FTC, Florida AG to small business: Scrutinize “o-fishy-al” invoices lfair July 30, 2018 | 11:05AM FTC, Florida AG to small business: Scrutinize “o-fishy-al” invoices By Lesley Fair If it looks like a duck and quacks like a duck, it’s probably a duck. But the same can’t be said for a mailer that looks like an official invoice. It could be an “o- fishy -al” offer that deceptively mimics the appearance of a government document. A case filed by the FTC and the Florida Attorney General challenges the practice of sending mailers that allegedly create the false impression that small businesses are required to buy labor regulation posters from the sender. Consider what defendants Starwood Consulting, also doing business as Corporate Compliance Services, and company president Thomas Henry Fred, Jr., sent to small businesses. The mailers – which include a Washington, D.C., 202 area code – are titled “LABOR LAW COMPLIANCE REQUEST FORM” and include the warning “Failure to comply with posting regulations can lead to fines up to $17,000.” The mailers include a “Business ID” and instruct recipients to respond by a certain date. Small businesses can’t miss the purported consequences of ignoring the letter: Your business is required by federal law to post a current compliant labor law poster in the workplace. Federal law requires that this poster be placed on the property of the business. Whether you have 1 employee or 1,000 you must post current employment posters in the workplace. The poster must also include information about workers compensation benefits. Pursuant to federal law 29 USC Sec. 999(i) & 29 USC Sec. 2005 penalties and risks of non-compliance with posting regulations can lead to potential fines of $17,000 per instance, for failing to post federally required information. Further, lawsuits can be tolled based on failing to display mandatory posters. . . . To obtain your Federal employment labor law poster, please detach the above coupon and return it in the enclosed envelope with your document processing fee of $84.00. The mailer continues: “IMPORTANT! FOLLOW INSTRUCTIONS EXACTLY WHEN COMPLETING THIS FORM.” Those instructions include directions to detach the “payment coupon,” return it with the “document fee” of $84, and keep the bottom portion as the “official receipt.” The enclosed return envelope is addressed to “Corporate Compliance Services, Compliance Processing Center.” That’s a description of the mailer, but here are the facts, according to the FTC and the AG. First, the mailer isn’t from a government entity or affiliate. Starwood Consulting and its d/b/a Corporate Compliance Services are private companies in the business of selling those posters. In addition, despite the 202 area code, the defendants have no operations in Washington and posters similar to the ones the defendants peddle are available for free from the U.S. Department of Labor. What about those statutory provisions referring to “potential fines of $17,000 per instance”? In fact, neither of those citations has anything to do with labor posters. 29 U.S.C. § 999(i) refers to repealed provisions of the Young Adult Conservation Corps and 29 U.S.C. § 2005 addresses the Employee Polygraph Protection Act. According to the complaint , recipients of the mailer are often small businesses that have recently incorporated or established limited liability companies. What’s more, some businesses say they never received the posters they paid for. Others report they got second notices that they had to pay another $84 fee to get an updated poster. Despite a small “disclaimer” at the bottom of the reverse side of the mailer that “[t]his offer serves as a solicitation and not to be intended as a bill due,” the FTC and the AG say that business owners were misled and filed more than 250 complaints about the company. (According to the Better Business","url":"https://www.ftc.gov/business-guidance/blog/2018/07/ftc-florida-ag-small-business-scrutinize-o-fishy-al-invoices","source":"FTC USA Business Blog Posts"},{"description":"Stick with Security: Require secure passwords and authentication lfair August 11, 2017 | 10:47AM Stick with Security: Require secure passwords and authentication By Thomas B. Pahl, Acting Director, FTC Bureau of Consumer Protection To make it harder for hackers to bluff their way onto a computer network, careful companies follow the advice of Start with Security and require strong authentication practices . We’ve considered FTC settlements, closed investigations, and the questions we get from businesses about implementing good authentication “hygiene.” Here are some tips on using effective authentication procedures to help safeguard your network. Insist on long, complex, and unique passwords. A password’s very reason for being is to be easy for a user to remember, but hard for a fraudster to figure out. Obvious choices like ABCABC, 121212, or qwerty are the digital equivalent of a “hack me” sign. Furthermore, experts have determined that passphrases or longer passwords are generally harder to crack. The smarter strategy is for companies to think through their standards, implement minimum requirements, and educate users about how to create stronger passwords. Also, when you install software, applications, or hardware on your network, computers, or devices, change the default password immediately. And if you design products that require consumers to use a password, configure the initial set-up so they have to change the default password. Example: A staff member attempts to select payroll as the password for the database that includes employee payroll information. The company sets up its system to reject an obvious choice like that. Example: To access the corporate network, a business allows employees to type in their username and a shared password common to everyone who works there. Employees are also allowed to use that shared password to access other services on the system, some of which contain sensitive personal information. The more prudent policy would be to require strong, unique passwords for each employee and to insist that they use different passwords to access different applications. Example: At a staff meeting, a company’s IT manager offers tips for employees about good password hygiene. She explains that passphrases or longer passwords are better than short passwords based on standard dictionary words or well-known information (for example, a child’s name, a pet, a birthday, or a favorite sports team). By establishing a more secure corporate password standard and educating employees about implementing it, the IT manager is taking a step to help her company reduce the risk of unauthorized access. Store passwords securely. A company’s first line of defense against data thieves is a workforce trained to keep passwords secret. But even the strongest password is ineffective if an employee writes it on a sticky note on her desk or shares it with someone else. Train your staff not to disclose passwords in response to phone calls or emails, including ones that may appear to be coming from a colleague. Con artists have been known to impersonate corporate officials by spoofing phone numbers or email addresses. A compromised password poses a particular risk if it can be used to open the door to even more sensitive information – for example, a database of other user credentials maintained on the network in plain, readable text. Make it difficult for data thieves to turn a lucky password guess into a catastrophic breach of your company’s most sensitive data by implementing policies and procedures to store credentials securely. Example: A new employee gets a call from someone who claims to be the company’s system administrator. The caller asks him to verify his network password. Because the new staffer learned about impersonation scams at an in-house security orientation, he refuses to disclose his password and instead reports the incident to the appropriate person in the company. Example: A company keeps user credentials and other passwords in plain","titre":"Stick with Security: Require secure passwords and authentication","pubDate":"Mon, 05 Oct 2026 08:07:08 +0200","id":3197409,"source":"FTC USA Business Blog Posts","url":"https://www.ftc.gov/business-guidance/blog/2017/08/stick-security-require-secure-passwords-authentication"},{"url":"https://www.berec.europa.eu/en/news/press-releases/berec-presents-its-assessment-of-the-digital-networks-act-proposal","source":"BEREC Office","pubDate":"Thu, 11 Jun 2026 10:23:49 +0200","id":2947754,"titre":"BEREC presents its assessment of the Digital Networks Act proposal","description":"BEREC presents its assessment of the Digital Networks Act proposal yannick.stephan Wed, 10/06/2026 - 18:07 Press Releases Europe’s electronic communications framework is entering a pivotal phase of reform, with the proposed Digital Networks Act (DNA ) set to update the regulatory framework for connectivity across the EU. At the BEREC public debriefing on 10 June, the BEREC Chair, Marko Mismas (AKOS, Slovenia), and the Working Group Co-Chairs presented BEREC’s assessment of the DNA proposal, outlining key regulatory considerations that emerged from its analysis. BEREC welcomes the ambition of modernising the EU connectivity framework and supporting resilient, sustainable and high-quality digital networks. At the same time, the assessment highlights areas where further refinement may be needed to ensure that the future framework strengthens rather than adds unnecessary complexity to the internal market for electronic communications. BEREC has developed thematic papers examining key elements of the proposal in greater depth, supporting evidence-based input to the co-legislators. To further contribute to the policy debate, BEREC will publish three additional thematic papers by the end of June. BEREC remains committed to providing its technical and regulatory expertise to help shape a competitive, innovative and future-proof digital Europe. 5G slicing guidance BEREC experts look forward to receiving stakeholders’ input to the public consultation on the draft further guidance on 5G network slicing by 6 August 2026. The draft guidance aims to provide greater regulatory certainty for market players and support innovation in 5G services, while safeguarding open internet principles. Building on the existing Open Internet framework, the guidance will assist providers in assessing whether network slicing-based services comply with the Regulation, including in relation to internet access and specialised services. Reflecting the principle of technological neutrality, the approach is intended to remain relevant beyond 5G and to apply to other technologies that use comparable quality-of-service mechanisms. Call for inputs on roaming BEREC has issued a call for inputs regarding its work on roaming. This call aims to support the preparation of BEREC’s Opinion for the European Commission on the upcoming review of the EU Roaming Regulation and the Implementing Regulation on Fair Use Policy and Sustainability, which is scheduled for submission by the first quarter of 2027. Building on its 2025 Opinion, BEREC invites stakeholders to provide new information, evidence, and perspectives by 21 August 2026. In addition, following the consultation on possible amendments to the BEREC Roaming Benchmark Data Collection procedure, BEREC decided to maintain the current quarterly data collection approach. However, the expansion of the Roam-Like-at-Home regime to Ukraine and Moldova on 1 January 2026, together with the simplification proposals in BEREC’s 2025 Opinion on the Roaming Regulation, requires an update of the roaming data collection template. BEREC therefore launched a call for input on the revised template and invites operators to submit their comments by 3 July 2026. Emergency communications resilience Ensuring uninterrupted access to emergency services for end users remains a critical priority as 2G and 3G mobile networks are progressively phased out across Europe. During its latest plenary meeting, the Heads of the European regulators for electronic communications discussed and adopted a BEREC statement addressing concerns that some devices may fail to connect to emergency communications services, including 112, once legacy networks are switched off. The statement aims to raise awareness of the issue and calls for closer cooperation across the entire communications ecosystem. BEREC underlines the need for further investigation, improved detection of potential failures, and greater transparency among stakeholders to help safeguard the reliability of emergency communications throughout the technological"}]