[{"source":"FTC USA Business Blog Posts","id":3198181,"description":"Keep FCRA in the foreground when the subject is background screening chundycz April 9, 2014 | 12:13AM Keep FCRA in the foreground when the subject is background screening By Lesley Fair When the talk turns to Big Data, part of the conversation is about all the public information available about people's lives – and how companies market it to prospective employers, landlords, etc.  Two cases just announced by the FTC  serve as a cautionary reminder to members of the industry that what they do may be subject to the long-standing consumer protections of the  Fair Credit Reporting Act (FCRA) .  InfoTrack, an Illinois company, and San Diego-based Instant Checkmate will be paying civil penalties to settle FTC lawsuits that they violated the FCRA.  Is it time for an FCRA refresher at your business? Instant Checkmate marketed its reports as a way for prospective employers and landlords to investigate applicants.  For example, the company advertised that one of the “GOOD REASONS to get instant criminal checks on anyone right now” was to “check out tenants before they rent.”  It also used a Google Ad Words campaign to make sure its site appeared when people searched for background checks on nannies, babysitters, maids, and housekeepers.  What kind of information would buyers get?  Current and previous addresses, birth certificates, arrest histories, and marriage and divorce records, to name just a few examples. InfoTrack offered similar services to employers nationwide, including background screening reports with people’s driving records, education and employment information, criminal histories, and even records from sex offender registries. How does the FCRA come in?  The law defines a “consumer report” as a “communication of any information” by a consumer reporting agency (CRA) that bears on a person’s “credit worthiness, credit standing, credit capacity, character, general reputation, personal characteristics, or mode of living” which is used (or expected to be used) as a factor in establishing their eligibility for credit, insurance, employment, or other reasons outlined in the law. According to the FTC, what Instant Checkmate and InfoTrack were doing triggered the FCRA.  For example, companies covered by the law must follow procedures to assure their reports are as accurate as possible, must take steps to see that those using their reports have permissible purposes for accessing them, and must provide required User Notices explaining key protections for consumers.  The law imposes special requirements when CRAs provide reports containing public record information that could have an adverse effect on a person’s ability to get a job.  In that case, the CRA must either: 1) notify the consumer that it’s reporting the information in the public record; or 2) maintain “strict procedures” – that’s the language in the law – designed to ensure the reported public information is complete and up to date. You’ll want to read the complaints for specifics of where the FTC says the companies fell short, but one example cited in the lawsuit against InfoTrack offers an object lesson on why FCRA protections are so important to consumers – and how the consequences can be devastating when companies don’t live up to the law.  According to the FTC, the reports InfoTrack provided to prospective employers included information about whether a job applicant was on the National Sex Offender Registry.  The employer would provide the first and last name and the date of birth to help InfoTrack with its search.  The problem was that before the fall of 2011, no date of birth was available for many names on the Registry.  If InfoTrack’s search found more than one person with the same first and last name, it reported a “possible match” to employers and gave them reports that included several different people with the","pubDate":"Mon, 05 Oct 2026 14:07:46 +0200","url":"https://www.ftc.gov/business-guidance/blog/2014/04/keep-fcra-foreground-when-subject-background-screening","titre":"Keep FCRA in the foreground when the subject is background screening"},{"source":"FTC USA Business Blog Posts","description":"New FTC warning letters cite unsupported Coronavirus-related health and earnings claims sgressin April 24, 2020 | 12:44PM New FTC warning letters cite unsupported Coronavirus-related health and earnings claims By Seena Gressin The FTC is not the pen pal you want if you operate a multi-level marketing company but aren’t closely monitoring your distributors. In its latest round of warning letters, the FTC warns ten MLM companies that they are responsible for the claims made by their participants. The letters direct the companies to report within 48 hours what actions they’ve taken to stop their distributors from claiming their products can treat or prevent Coronavirus disease, that MLM business opportunity participants are likely to earn substantial income, or both. The FTC says that the health and earnings claims are unsubstantiated and therefore violate truth-in-advertising laws. The products at issue are not scientifically proven to treat or prevent COVID-19, the disease that Coronavirus causes. The FTC previously has sent warning letters to companies about their Coronavirus-related health claims, but the new letters are the first to also target claims about potential business opportunity earnings. The letters come at a time when millions of people are out of work and facing financial challenges as a result of the pandemic. MLM companies rely on a network of independent distributors, sometimes called business opportunity participants, to buy and resell their products, often through direct person-to-person sales or online. MLMs typically offer participants a cut of the sales made by people the participant recruits to invest in the business opportunity. The new recruits then try to sell the products, and try to recruit more people to do the same. Most people who join MLMs make little or no money. According to the FTC, distributors of the MLM companies receiving the letters have posted promotional messages on Facebook, Instagram, and other social media sites. Health claims the FTC letters cite include: “STAY SAFE!! MAKE YOUR IMMUNE SYSTEM STRONG!!!” Standard coronavirus protection kit . #antiseptics and #immunity_support.” “HOW WILL YOU FIGHT OFF CORONA? USE NUTRABURST-CHAGA- .... #coronacure #coronaprevention ... #immunesupport #immunebooster ... #immunesystembooster” “Got the coronavirus heebeegeebees? Boost your immunity with this amazing deal!!!!” “... If interested to learn more or obtain oils or rollers Let me know A little extra protection can help #doterra #NursesCOVID19 #Dialysis #ImmunityBoosters #ImproveRespiratoryFunction” Earnings claims the FTC letters cite include: “...Living in quarantine and where 14 million people applied for unemployment just last week ... I’ll stick with the opportunity to change people’s lives ... turn a small investment into six figures .... #arbonne ... #quarantine #2020” “Need to make extra money? Find it difficult to pay your bills? Were you laid off/ #fired? Be your own Boss w/doTERRA essential oils. Msg me to achieve financial independence #laidoff #unemployed #cantpaymybills #cantpaymyrent #student #sales #sidehustle #makemoney #stayathomemom.” “[E]veryone’s getting stimulus checks right now... There is no better investment you could do... Take that money that you’re about to get back... figure out a way to make this happen tonight.” In the letters alleging unsubstantiated health claims, FTC staff reminds the companies that, under the FTC Act, claims that a product can prevent, treat, or cure a serious disease require the support of well-controlled human clinical studies. Because “no such study is currently known to exist” for the advertised products, the FTC says the companies “must immediately cease making all such claims.” In the letters alleging deceptive earnings claims, FTC staff reminds the companies that under the FTC Act, “claims about the potential to achieve a wealthy lifestyle, career-level income, or significant","id":3197413,"titre":"New FTC warning letters cite unsupported Coronavirus-related health and earnings claims","url":"https://www.ftc.gov/business-guidance/blog/2020/04/new-ftc-warning-letters-cite-unsupported-coronavirus-related-health-earnings-claims","pubDate":"Mon, 05 Oct 2026 08:07:08 +0200"},{"pubDate":"Thu, 01 Oct 2026 14:34:59 +0200","titre":"Michel Van Bellinghen elected BEREC Chair 2028","url":"https://www.berec.europa.eu/en/news/latest-news/michel-van-bellinghen-elected-berec-chair-2028","source":"BEREC Office","id":3191419,"description":"Michel Van Bellinghen elected BEREC Chair 2028 yannick.stephan Thu, 01/10/2026 - 08:59 Latest News At its plenary meeting on 1 October 2026, the Board of Regulators elected Michel Van Bellinghen , Chair of the BIPT Council (Belgium), as the BEREC Chair for 2028. In the year preceding the chairmanship, he will join the Mini-Board and work closely with the incoming Chair, Alejandra de Iturriaga Gandini ( CNMC , Spain), helping to ensure a smooth handover of responsibilities and continuity in BEREC’s work. This will be the second time Michel Van Bellinghen serves as BEREC Chair. BEREC leadership in 2027 BEREC’s leadership is centred on the Chair, supported by the Vice-Chairs. The Mini-Board, composed of the Chair, the Vice-Chairs and participants without voting rights, provides support for the Chair in carrying out their leadership responsibilities. During the plenary meeting, the Board of Regulators also elected the Vice-Chairs for 2027. Klaus Steinmaurer ( RTR , Austria) and Karol Krzywicki ( UKE , Poland) will support the Chair in preparing and coordinating BEREC’s work, including plenary discussions, strategic planning and stakeholder engagement. Armer Juka ( AKEP , Albania) was elected as the representative of participants without voting rights to the Mini-Board for 2027. In addition, the incoming and outgoing BEREC Chairs – Michel Van Bellinghen and Marko Mismas ( AKOS , Slovenia) – will also serve as Vice-Chairs. The Vice-Chairs have two main functions. First, the incoming Chair – or, if necessary, one of the Vice-Chairs – may take over the role of Chair when the Chair is not in a position to perform their duties. Second, each Vice-Chair supports and follows the work of a specific cluster of BEREC Working Groups. The BEREC Chair decides the allocation of these clusters. In the year preceding the chairmanship, the incoming Chair is also responsible for preparing the annual work programme. What the BEREC Chair does The BEREC Chair plays a central role in guiding BEREC’s work during the chairmanship year. The Chair leads plenary meetings, represents BEREC externally, helps build consensus among national regulatory authorities and oversees the implementation of the annual work programme. The Vice-Chairs support the Chair in carrying out these responsibilities and help ensure continuity between the annual chairmanships. Together, the Chair and Vice-Chairs contribute to the effective functioning of BEREC and to the achievement of its objectives. The BEREC Chair is responsible for BEREC’s external relations and for representing its interests. The Chair informs members about external activities, reports on their outcomes and shares any relevant materials. When invited, the Chair also reports on the performance of BEREC’s tasks to the European Parliament and the European Commission. In addition, the BEREC Chair serves as Chair of the Mini-Board, convenes its meetings and informs the Board of Regulators about its activities. Appointment process The BEREC Chair is elected every year. To be nominated and elected as Chair, a candidate must be supported by at least four BEREC members, not including the candidate themself, and must have served for at least one year as Vice-Chair. Election requires the support of at least two-thirds of the Board of Regulators who vote in order to be elected. The Chair’s term of office is one year. Similarly, every year, the Board of Regulators elects at least two Vice-Chairs from among its members for the following year."},{"pubDate":"Thu, 19 Mar 2026 14:12:59 +0100","titre":"CEF 2026: EDPB launches coordinated enforcement action on transparency and information obligations under the GDPR","url":"https://www.edpb.europa.eu/news/news/2026/cef-2026-edpb-launches-coordinated-enforcement-action-transparency-and-information_en","source":"EDPB News","id":2769535,"description":"Brussels, 19 March - The EDPB has launched its Coordinated Enforcement Framework (CEF) action for 2026*. Following a year-long coordinated action on the right to erasure in 2025 , the CEF's focus this year will shift to compliance with the obligations of transparency and information under the GDPR . The GDPR ensures that individuals are informed when their data is being processed (under Art. 12, 13 and 14). This right to be informed is a core element of transparency and ensures that individuals have more control over their data. Next steps During 2026, 25 Data Protection Authorities (DPAs) across Europe will take part in this initiative. They will look closely to assess the compliance of controllers with their transparency obligations under the GDPR. Participating DPAs will soon contact controllers from different sectors across Europe, either through enforcement actions or fact-finding exercises. In the latter case, they might also decide to undertake additional follow-up actions if needed. During the second half of the year, participating DPAs will share and discuss their findings together, with a view to aggregate the results of their national actions and generate deeper insight into the topic. A consolidated report will then be drafted and submitted for adoption by the EDPB, allowing for targeted follow-ups on both national and EU levels. Background The CEF is a key action of the EDPB under its 2024-2027 Strategy , aimed at streamlining enforcement and cooperation among DPAs. In 2023, the EDPB published the report on its first coordinated action on the use of cloud-based services by the public sector . In 2024, the EDPB also published the report on the outcome of the second coordinated action on the designation and position of Data Protection Officers . In 2025, the EDPB issued the report on its third coordination action on the implementation of the right of access . In 2026, the EDPB has adopted a report on its Coordinated Enforcement Framework (CEF) action on the right to be forgotten (Art.17 GDPR) .   Note to editors: *The Board selected this topic during its October 2025 plenary"},{"source":"EDPB News","description":"Brussels, 18 February - The European Data Protection Board (EDPB) has adopted a  report on its Coordinated Enforcement Framework (CEF) action on the right to be forgotten (Art.17 GDPR) .  The  Board selected this topic  as it is one of the most frequently exercised GDPR rights and one about which DPAs frequently receive complaints from individuals. The main objectives of this coordinated action are to ensure that the right to erasure is effectively exercised by individuals in Europe and understand how controllers comply with this right in practice. In addition, the EDPB identified good practices and the most important related challenges, with the aim of providing further guidance on this topic.  Throughout 2025, 32 DPAs across Europe took part in this initiative. More specifically, 9 DPAs have initiated new formal investigations or have continued ongoing ones, and 23 DPAs carried out a fact-finding exercise. A total of 764 controllers across Europe responded to the action, ranging from small and medium-sized enterprises (SMEs) to big companies active in many different industries and fields, as well as various types of public entities. The results of these national actions have been aggregated and analysed together allowing for targeted follow-up on both national and EU level.   Areas of improvement and main challenges The report lists the issues that were identified, along with a series of recommendations addressed to controllers, to help them implement the right to erasure. Seven recurring main challenges were identified by DPAs. The results confirmed some of the findings of the 2024 coordinated action on the right of access , for example when it comes to the lack of appropriate internal procedures to handle requests, or the lack of sufficient information provided to individuals. In addition, participating DPAs reported specific findings related to the reliance by some controllers on inefficient anonymisation techniques to handle erasure requests as an alternative to deletion. DPAs also noted inconsistent practices, and the difficulties faced by controllers regarding the determination of retention periods and the deletion of personal data in the context of back-ups. In addition, as the right to erasure is not an absolute right, some controllers face difficulties in assessing and applying the conditions for the exercise of this right, including in carrying out the different balancing tests between the right to erasure and other rights and freedoms.   Follow-up to help organisations comply  Extensive guidance, documents and templates exist at national level to help controllers comply with the right of erasure and help individuals exercise this right. In line with the Helsinki Statement’s objectives of making GDPR compliance easier and ensuring consistent interpretation and enforcement across Europe, the extensive guidance and templates already available at national level will be leveraged at EDPB level where appropriate.   Background and next steps The CEF is a key action of the EDPB under its 2024-2027 Strategy , aimed at streamlining enforcement and cooperation among DPAs.  In 2023, the EDPB published the report on its first coordinated action on the  use of cloud-based services by the public sector . In 2024, the EDPB also published the report on the outcome of the second coordinated action on the  designation and position of Data Protection Officers . In 2025, the EDPB issued the report on its third coordination action on the  implementation of the right of access . The CEF 2026 action will be on the  obligations of transparency and information under the GDPR .   For further information: DA DPA:   EDPB vedtager rapport om dataansvarliges overholdelse af retten til sletning EL DPA: Ολοκλήρωση της συντονισμένης δράσης του","id":2703238,"url":"https://www.edpb.europa.eu/news/news/2026/edpb-identifies-challenges-hindering-full-implementation-right-erasure_en","titre":"EDPB identifies challenges hindering the full implementation of the right to erasure","pubDate":"Wed, 18 Feb 2026 15:27:14 +0100"},{"source":"EDPB News","description":"Brussels, 12 September - During its September plenary meeting, the European Data Protection Board (EDPB) has adopted guidelines on the interplay between the Digital Services Act (DSA) and the General Data Protection Regulation (GDPR) . These are the first set of EDPB guidelines on the interplay between the GDPR and the EU’s recently adopted digital laws. The DSA aims to complement the rules of the GDPR to ensure the highest level of protection of fundamental rights in the digital space. Its main goal is to create a safer online environment in which the fundamental rights of all users, including the right to freedom of expression, are protected. It applies to online intermediary services , such as search engines and platforms. Several provisions included in the DSA entail the processing of personal data by intermediary service providers. The EDPB guidelines contribute to the consistent application of the DSA and of the GDPR, insofar as some provisions of the DSA concern the processing of personal data by intermediary service providers and include references to GDPR concepts and definitions. While it is up to the competent authorities under the DSA - with the support of the European Board for Digital Services and EU courts - to interpret the DSA, there are a number of provisions which relate to the GDPR. These include: notice-and-action systems that help individuals or entities report illegal content recommender systems used by online platforms to automatically present specific content to the users of the platform with a certain relative order or prominence the provisions to ensure a high level of privacy, safety, and security of minors and prohibiting that profile-based advertising using their data is presented to them transparency of advertising by online platforms prohibition of profiling-based advertising using special categories of data  The EDPB guidelines help to understand how the GDPR should be applied in the context of DSA obligations. The EDPB also provides practical guidance relating to the cross-regulatory cooperation between authorities to coordinate enforcement which will provide more legal certainty for intermediary service providers and ultimately to protect the rights and freedoms of individuals. The guidelines will be subject to public consultation, providing stakeholders with the opportunity to comment and provide feedback. EDPB Chair Anu Talus said: “By clarifying the interplay between the DSA and the GDPR, these guidelines mark a significant step towards ensuring a coherent and effective EU digital rulebook, and they will help uphold the fundamental rights and freedoms of individuals. I hope that stakeholders, including the competent authorities under the DSA, will make the most of the opportunity to contribute to the public consultation\". More work in the pipeline Following these first guidelines on the interplay between the GDPR and the DSA, further work is underway with other regulators to clarify the new cross-regulatory landscape and maintain coherent and consistent safeguards for the protection of personal data. In this regard, the EDPB is working on joint guidelines with the European Commission on the interplay between the Digital Markets Act (DMA) and the GDPR, as well as on joint guidelines on the interplay between the AI Act and EU data protection laws.","id":2368407,"url":"https://www.edpb.europa.eu/news/news/2025/interplay-between-dsa-and-gdpr-edpb-adopts-guidelines_en","titre":"Interplay between the DSA and the GDPR: EDPB adopts guidelines","pubDate":"Fri, 12 Sep 2025 15:51:31 +0200"}]