[{"url":"https://www.ftc.gov/business-guidance/blog/2018/09/root-root-root-regions","titre":"Root, root root for the regions","pubDate":"Wed, 07 Oct 2026 14:05:07 +0200","description":"Root, root root for the regions lfair September 24, 2018 | 2:03PM Root, root root for the regions By Andrew Smith, Director, FTC Bureau of Consumer Protection T his year eight major league baseball teams are celebrating milestone anniversaries – and so are the FTC’s regional offices. In 1918, the Commission opened the first three of its regional offices. Today, eight regional offices continue to knock it out the park on behalf of America’s consumers. So it’s only fitting that on this momentous day we acknowledge the regional offices’ century of pennant-winning performances. According to the Commission’s 1918 Annual Report, “In order to expedite the greatly increased work of the Commission . . . small branch offices were established in New York, Chicago, and San Francisco.” Over time, the FTC has added other locations for a current total of eight offices in seven regions. Regional staff work with the Bureau of Consumer Protection and the Bureau of Competition on investigations and litigation. But they are in a unique position to host roundtables and workshops in their communities; to coordinate with local, state, and cross-border law enforcers; and to build partnerships with consumer groups and small business organizations within their region. According to the scouting report, there isn’t a pitch they can’t hit. Here’s a brief look at each region’s box score with a focus on just a few of their many MVP contributions to the FTC’s consumer protection mission. East Central Region . In 1918, the Cleveland Indians finished just out of pennant contention, but the FTC’s Cleveland-based office works hard to bring home the W for consumers and small businesses. For example, ECR has brought a number of cases over the past two decades to protect small businesses in their area and around the country, including cramming, business directory, and unordered merchandise scams. Recently, ECR played a central role in Operation Main Street, the FTC’s recent initiative against scammers targeting small businesses. Midwest Region . Chicago fans may be divided in their loyalty to the Cubs and the White Sox, but consumers who lost money to scammers who used the services of a major money transfer company are united in their appreciation for the FTC-DOJ settlement that returned $586 million back to them. And just recently, MWR hosted the Commission’s workshop on cryptocurrency scams and took a lead role in Operation Tech Trap, a coordinated state, federal, and international effort to shut down tech support fraudsters. Northeast Region . Given New York’s connection to names like Huggins, Houk, Stengel, Berra, and Torre, it’s no wonder the FTC’s Northeast Region has particular expertise in coaching. But in NER’s case, it’s about companies that make deceptive “coaching” and money-making representations. The New York-based office also has been one of the FTC’s power hitters in addressing misleading practices in the affiliate marketing industry. And from their Big Apple location, NER has been a leader in educating consumers, particularly older Americans and small businesses. Northwest Region . Like their hometown Seattle Mariners, the FTC’s Northwest Region has a proven record of navigating the complexities on the field of play. NWR coordinated Operation Donate with Honor, a nationwide crackdown on fraudulent charities alleged to have conned consumers by falsely promising their contributions will help veterans and servicemembers. In addition, our team in Seattle regularly coordinates with Canadian counterparts to combat cross-border fraud. And they’ve been ahead of the curve on tech issues, bringing one of the FTC’s first internet cases in the 90s and more recently, an early online influencer action. Southeast Region . The Atlanta Braves boast a national fan base – and due to their expertise in fighting fraud, the FTC’s Southeast Region can be proud of its coast-to-coast impact,","id":3201877,"source":"FTC USA Business Blog Posts"},{"source":"FTC USA Business Blog Posts","id":3195787,"description":"Speaking of Spokeo: Part 2 — The company’s allegedly bogus endorsements wfg-adm109 June 13, 2012 | 12:25PM Speaking of Spokeo: Part 2 — The company’s allegedly bogus endorsements By Lesley Fair The lawsuit against data broker Spokeo is the FTC’s first Fair Credit Reporting Act case addressing the collection of online info — including data from social networking sites — when used in the context of employment screening.  But that’s not the only way the Spokeo settlement touches on social media.  The FTC also charged that Spokeo violated Section 5 by having employees post glowing recommendations of the company’s services on news and technology websites without disclosing their true identity. Perhaps just the work of a rogue cubicle occupant?  No, said the FTC.  According to the complaint , Spokeo directed its employees to write the comments.  Spokeo managers then edited what they wrote and had the staffers post the endorsements using account names provided by Spokeo.  The purpose, says the FTC, was to give readers the misleading impression that the laudatory words had been posted by independent consumers or business users of Spokeo. The FTC’s revisions to its Endorsement Guides made headlines a few years ago.  Ironically enough, the provision that seemed to attract the most attention is one that didn’t change.  It’s the law — and it’s always been the law under Section 5 — that consumers have a right to know when there’s a material connection between an advertiser and an endorser.  Here’s how the Guides put it:  \"When there exists a connection between the endorser and the seller of the advertised product that might materially affect the weight or credibility of the endorsement ( i.e., the connection is not reasonably expected by the audience), such connection must be fully disclosed.\" According to the FTC, by posting comments that conveyed the untruthful impression that they came from satisfied users of Spokeo’s services, Spokeo engaged in false and misleading practices.  To settle the endorsement count in the lawsuit, Spokeo has agreed that it won’t misrepresent, expressly or by implication, the status of any user of a product or service — for example, that someone is an independent, ordinary endorser if that’s not the case.  The company also will clearly and prominently disclose any material connection between an endorser and Spokeo (or any other entity advertising, selling, or promoting a product) when a connection exists.  What about the bogus endorsements already posted?  Spokeo has seven days to take all reasonable steps to pull them down. Looking for more about complying with the Endorsement Guides?  Read The FTC’s Revised Endorsement Guides: What People are Asking and watch this video: While you’re at it, share this post and those resources with your marketing staff, your ad agency, your PR firm, and anyone else who plays a role in your publicity and promotions. Next:  What the Spokeo settlement means for your business, your next ad campaign, and your job search","pubDate":"Sat, 03 Oct 2026 14:06:13 +0200","titre":"Speaking of Spokeo: Part 2 — The company’s allegedly bogus endorsements","url":"https://www.ftc.gov/business-guidance/blog/2012/06/speaking-spokeo-part-2-companys-allegedly-bogus-endorsements"},{"id":3194910,"description":"Practice Fusion case suggests 6 health privacy pointers lfair June 8, 2016 | 9:01AM Practice Fusion case suggests 6 health privacy pointers By Lesley Fair Combine two of the most talked-about consumer protection topics – health privacy and consumer-generated online content – and what do you get? A proposed FTC settlement with Practice Fusion, the largest cloud-based electronic health records company in the country, and six compliance tips for others in the industry. One of San Francisco-based Practice Fusion’s primary products is an electronic records system for outpatient providers. In 2009, the company launched “Patient Fusion,” an online portal where patients whose providers were already using Practice Fusion could view or download their health information or transmit it to another provider. Patient Fusion also let patients send and receive secure messages from their providers. Fast forward several years and the company decided to expand Patient Fusion to include a public directory where current and prospective enrollees could search for doctors geographically or by specialty, read patient reviews of providers, and request appointments. But Practice Fusion had to ask itself a question familiar to many online companies: How do we get the content – in this case, patient reviews? That’s the focus of the FTC’s lawsuit. According to the complaint , Practice Fusion solicited data in a misleading way that led some patients to believe they were sending follow-up messages directly to their doctors about their diagnosis, medical treatment, prescriptions, etc. – and not contributing content to a public website. Practice Fusion, however, populated its new site with the information those people provided, some of which was highly sensitive. Here’s what happened. After appointments with their doctors, patients received emails titled “How was your visit?” The message continued, “To help improve your service in the future, please let us know how your visit went” and included a link with rating stars. The message ended this way: Thank you, Dr. [Name] In a footer, the message said “This email was sent to you by Patient Fusion®, a tool Doctor [Name] uses to deliver the highest quality of care to patients.” Below that in smaller print it said “Sent on behalf of Doctor [Name]’s office by: Practice Fusion.” If patients clicked the link, they were taken to a page that asked for feedback about things like how long they had to wait for their appointment, the doctor’s bedside manner, and whether their medical concern was addressed. There also was a text box where patients were invited to “leave a review for your provider.” Below that was a pre-checked box with the phrase “Keep this review anonymous.” What did some people put in that box? Highly sensitive information directly addressed to their doctors, not evaluations meant to be shared publicly. Here are just a few examples: “Dr [name], My Xanax prescription that I received on Monday was for 1 tablet a day but usually it’s for 2 tablets a day. I have not taken it to the pharmacy yet. Can I pick up a new one, or can I get a prescription called into a pharmacy? Thanks, [patient’s full name] “I called today and left a message regarding my daughter and no one has returned my call. I think she is depressed and has stated several times this week that she wishes she was dead. Could someone please call me [phone number]?” “The cefuroxime axetil does not seem to be doing anything for me. I did a little research and I think I have a yeast infection called candida. Not sure what to do about it yet. I guess I will first try to change my diet. Medication? [patient’s full name] “I would like to make an appointment for my back pain and possible shingles. Can you please call me @ [phone number]? Thank you! [patient's full name]” “I HAVE NO INFECTION [healthcare provider name].  EVERYTHING WENT","source":"FTC USA Business Blog Posts","pubDate":"Sat, 03 Oct 2026 08:09:37 +0200","titre":"Practice Fusion case suggests 6 health privacy pointers","url":"https://www.ftc.gov/business-guidance/blog/2016/06/practice-fusion-case-suggests-6-health-privacy-pointers"},{"url":"https://www.ftc.gov/business-guidance/blog/2014/11/company-pay-22-million-offering-free-credit-scores-turned-out-be-not-so-free","titre":"Company to pay $22 million for offering \"free\" credit scores that turned out to be not so free","pubDate":"Sat, 03 Oct 2026 08:09:37 +0200","source":"FTC USA Business Blog Posts","description":"Company to pay $22 million for offering \"free\" credit scores that turned out to be not so free wfg-adm109 November 19, 2014 | 11:12AM Company to pay $22 million for offering \"free\" credit scores that turned out to be not so free By Lesley Fair We’ve brought law enforcement actions – dozens of ‘em. We’ve held workshops, issued reports, and sent warning letters. If it takes sky writing, tap dancing, and a float in a Thanksgiving Day parade, we’ll do that, too. But here’s what’s not going to happen. The FTC is not giving up until businesses get the message that: 1) Free means free; and 2) Key terms and conditions have to be clearly and conspicuously disclosed. A $22 million settlement announced by the FTC and the AGs of Illinois and Ohio with a national credit monitoring service advertising so-called “free” credit scores emphasizes that point. Another note for practitioners: It's the FTC's third case alleging violations of ROSCA . One Technologies and related outfits marketed their credit monitoring programs, MyCreditHealth and ScoreSense, through at least 50 sites, including FreeScore360.com, FreeScoreOnline.com and ScoreSense.com. Their strategy was simple. Buy advertising on search engines so their ads show up near the top when people look for phrases like “free credit report\" and then follow up with a persuasive pitch: “View your latest Credit Scores from All 3 Bureaus in 60 seconds for $0!” According to the lawsuit , the defendants failed to clearly tell consumers that if they availed themselves of those “free” services and didn’t cancel within seven days, the defendants would ding their credit cards for $29.95 a month over and over and over again. The complaint includes screen shots of the defendants’ sites, but before looking at them, take out your reading glasses because they’ll come in handy in trying to locate where the defendants chose to tell people about that $29.95 monthly fee. One line of fine print added in late 2012 said “Free 7-Day trial when you order your 3 Free Credit Scores. Membership is then just $29.95 per month until you call to cancel.” The first problem: The type was tiny – a fraction of the size of the defendants’ multiple use of the word “free.” The second problem: Why should consumers even have to be on the look-out for the cost, given that the defendants so prominently advertised it as “free”? A second purported disclosure appeared as an obscure hyperlink on the page where people typed in their Social Security number and birthdate.  Sandwiched between the logos of various security firms and a large color button that said CONTINUE was this less-than-crystal-clear statement: By clicking on the ‘Continue’ button, you agree to the Offer Details, to the Terms and Conditions, acknowledge receipt of our Privacy Policy and agree to its terms . . . The “Offer Details” link triggered a small pop-up that said, among other things, “At the end of the 7-day trial period, your credit/debit card will be charged $29.95 on a monthly basis until you call to cancel.” Another place the defendants put the information was on a side panel of the Payment Form in white letters on a grey background – a color combination one of the defendants’ own employees described as “known to cause seizures in lab rats.” According to the complaint, once people spotted the unauthorized charges on their accounts, the defendants didn’t make it easy to stop the billing.  And even when people asked for their money back because they hadn’t approved of the charges, the defendants denied refunds to many of them. The lawsuit alleges violations of the FTC Act, as well as the Illinois Consumer Fraud Act, the Ohio Consumer Sales Practices Act, and related state rules. In addition, the complaint is the third FTC action to charge violations of ROSCA, the Restore Online Shoppers’","id":3194913},{"source":"FTC USA Business Blog Posts","id":3187485,"description":"FTC takes on unproven health claims and “own-dorsements” lfair March 19, 2020 | 4:38PM FTC takes on unproven health claims and “own-dorsements” By Lesley Fair It’s a disturbing trend. Companies are targeting older consumers, claiming to have easy answers for serious diseases for which there may not be a proven cure. That’s one allegation in the FTC’s action against Nevada-based telemarketer Health Center, Inc.   Another count challenges what we call “own-dorsements.” According to Health Center’s telemarketing scripts, websites, social media, and testimonials from supposedly satisfied customers, the company’s Rejuvi-Cell oral spray and Rejuvi-Sea and Rejuvi-Stem pills could treat a broad range of medical conditions: everything from cancer, Alzheimer’s disease, and Parkinson’s disease to hepatitis, heart attacks, and high cholesterol. In promoting the products, which sold in packages priced between $350 and $800, the company checked the buzzword boxes with science-y sounding terms like homeopathic , adult stem cell enhancement , and marine phytoplankton . The company claimed that diseases like diabetes, rheumatoid arthritis, and dementia “could be greatly reduced if not eliminated” through the use of its products. According to the complaint , Health Center’s telemarketers – who were instructed to follow the scripts word-for-word – told consumers the main ingredient of Rejuvi-Sea “alkalizes your body . . . so you can’t grow cancer cells.” Then there were heartfelt testimonials from purported customers who described themselves as “walking on air” and “amazed and redeemed,” thanks to the products. But the FTC says the company hasn’t conducted any studies demonstrating the products cure or treat any diseases or health conditions and there are no human clinical studies in the scientific literature to that effect. What’s more, the lawsuit alleges that some of those glowing endorsements that appeared to come from satisfied customers across the country were actually “own-dorsements” – testimonials from Health Center’s own employees. To settle the case , the defendants have agreed to injunctive provisions, including a requirement that a broad range of health claims must have the support of randomized, double-blind, and placebo-controlled human clinical testing. Almost all of the $8.6 million judgment will be suspended, based on their financial condition. Aside from the obvious points that the FTC continues to take a close look at cures targeting older consumers and that companies shouldn’t palm off endorsements from employees as independent opinions, the case illustrates two other important principles. First, the defendants’ unlawful practices were the subject of an earlier enforcement action by the Iowa Attorney General. Companies shouldn’t have to be told once of the need to substantiate their health claims – and they certainly shouldn’t have to be told twice. Second, the complaint includes a count for violating the Telemarketing Sales Rule , which prohibits misrepresentations about “any material aspect of the performance, efficacy, nature, or central characteristics of goods or services that are the subject of a sales offer.” That’s yet another reason to keep your telemarketing efforts above board .","pubDate":"Wed, 30 Sep 2026 14:10:25 +0200","titre":"FTC takes on unproven health claims and “own-dorsements”","url":"https://www.ftc.gov/business-guidance/blog/2020/03/ftc-takes-unproven-health-claims-own-dorsements"},{"titre":"FTC Finalizes Orders with Cox Media Group, Two Other Firms Settling Charges They Deceived Customers About “Active Listening” AI-Powered Marketing Service","url":"https://www.ftc.gov/news-events/news/press-releases/2026/08/ftc-finalizes-orders-cox-media-group-two-other-firms-settling-charges-they-deceived-customers-about","pubDate":"Fri, 28 Aug 2026 08:07:59 +0200","description":"The Federal Trade Commission finalized orders requiring Cox Media Group (CMG) and two other firms to pay a total of $930,000 to settle allegations they deceived customers by falsely claiming to offer an AI-powered service that could target localized ads based on conversations captured from consumers’ smart devices and that consumers had opted into such targeting. In three separate complaints first announced in May , the FTC alleged that Georgia-based media and marketing company CMG Media Corporation, which does business as  Cox Media Group , and two marketing firms it worked with, New Hampshire-based MindSift LLC  and Wisconsin-based  1010 Digital Works LLC ,  deceived customers by claiming they used a special algorithm to listen in on and detect pertinent conversations from smart devices in order to target ads to consumers within a specific geographic region. Contrary to these companies’ claims, however, the marketing service wasn’t based on voice data, and consumers hadn’t opted into this service. If the service had functioned as advertised, this collection and use of consumers’ voice data without adequate consent would itself violate the FTC Act. Under the proposed orders settling the FTC’s allegations,  CMG must pay $880,000 while both  MindSift and  1010 Digital Works  must each pay $25,000, which will be used to provide redress to CMG customers impacted by these practices. In addition, each defendant is prohibited from making any misrepresentation about the qualities or features of its advertising or marketing services; the collection and use of voice data and whether consumers have provided their consent to collect, use or disclose their voice data; and the geographic targeting capabilities of its advertising or marketing services. After receiving two comments on the proposed settlement orders, the Commission voted 2-0 to give final approval to the consent","id":3120376,"source":"Federal Trade Commission - Protecting America's Consumers"},{"titre":"BEREC focuses on digital accessibility progress in a hybrid workshop","url":"https://www.berec.europa.eu/en/news/latest-news/berec-focuses-on-digital-accessibility-progress-in-a-hybrid-workshop","pubDate":"Thu, 21 May 2026 16:14:31 +0200","description":"BEREC focuses on digital accessibility progress in a hybrid workshop yannick.stephan Thu, 21/05/2026 - 12:03 Latest News On 9 June 2026, from 9:30 to 14:50 CEST, BEREC will host an external workshop on accessibility at the IRG Secretariat in Brussels, Belgium. It is a hybrid event and participants may also attend online. The aim of the workshop is to assess what improvements have been made in practice recently, in the area of accessibility of electronic communications as the European Accessibility Act (EAA) marks its first anniversary. What's on the agenda? The programme is structured around four sessions with interconnected perspectives on the topic: The first session will focus on the end-users and examine real-world accessibility challenges, and practical solutions that support everyday digital participation. The following session will bring together regulatory authorities to explore how national approaches are shaping implementation, and how accessibility can move beyond compliance towards best practice. During the third session, industry will take the floor and will examine how market players are adapting services, developing technical solutions, and meeting implementation challenges under the new framework. The final session will shift focus to academia for its insights on the latest research, innovation, and the role of emerging technologies in advancing more inclusive digital services. Book your spot soon Participation is open to all, subject to registration . Please note that due to the limited capacity at the IRG Secretariat, in-person attendance is limited to 40 participants. Once this number is reached, online participation will be the only option. Note that for the on-site participants, sign language interpretation will be provided. The deadline for in-person registration is 2 June 2026, and online registration closes on 7 June 2026. Connection details will be sent to the registered participants before the event.","id":2898029,"source":"BEREC Office"},{"source":"Federal Trade Commission - Protecting America's Consumers","description":"StubHub, the nation’s largest ticket exchange and resale ticket provider, will pay $10 million to settle Federal Trade Commission charges that the company violated the FTC Act and the agency’s Rule on Unfair or Deceptive Fees by deceptively advertising ticket prices on its website without clearly and conspicuously disclosing up-front how much consumers actually would pay, including all mandatory fees. “The Commission’s Fees Rule makes it very clear that the total price of live-event tickets must be disclosed up-front to enable consumers to make fully informed purchasing decisions,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “Price transparency is essential to a free and competitive marketplace. Today’s settlement underscores the Commission’s commitment to ensuring that consumers pay the price they are promised.” The FTC’s action against StubHub Holdings, Inc., follows a  warning letter the agency sent the online ticket platform in May 2025 stating that multiple prices displayed on its website appeared to be in violation of the Fees Rule. Under the Rule, which took effect on May 12, 2025 , it is an unfair and deceptive practice for any business to offer, display, or advertise the price of a live-event ticket without clearly, conspicuously, and most prominently disclosing the total price, which the Rule defines as “the maximum total of all fees or charges a consumer must pay for any good(s) or service(s) and any mandatory ancillary good or service.” Misrepresenting prices also violates the FTC Act. Today’s action also follows the Administration’s recent Executive Order on Ticketing , which includes a directive for the FTC to “take appropriate action . . . to ensure price transparency at all stages of the ticket-purchase process, including the secondary ticketing market.” According to the Commission’s complaint , in mid-May 2025—after the Rule went into effect—StubHub advertised its ticket prices without disclosing the full price consumers would actually pay by failing to include mandatory fees and to disclose the total price everywhere it displayed prices. Specifically, the FTC alleges StubHub failed to provide the total price for tickets—including high-demand National Football League tickets in the lead-up to when the NFL schedule was announced on May 14, 2025—in the first three pricing displays on its website. On the initial two pricing displays, in numerous instances, the advertised price did not include all mandatory fees, and StubHub did not disclose the total price. On the third pricing display, StubHub listed multiple fees and charges but did not disclose the total price. The proposed order settling StubHub’s alleged violations of the FTC Act and the Fees Rule requires the company to pay $10 million, which the company will use to provide monetary relief to eligible consumers through a settlement and consumer redress distribution program. The order also prohibits StubHub from misrepresenting the total price of any good or service; any fee or charge, including its nature, purpose, amount, or refundability, as well as why the fee or charge is being imposed; the final payment amount for any transaction; and any other material fact including those related to refunds or cancellations. The proposed order also prohibits StubHub from: Offering, displaying, or advertising any price of a good or service without clearly and conspicuously disclosing the total price; Failing to disclose the total price more prominently than any other pricing information; Failing to clearly and conspicuously disclose the amount of any fees or charges that have been excluded from the total price and what they are for, as well as the final payment amount—before the consumer agrees to pay for a product or service; and Violating the Commission’s Fees Rule. Within 90 days of the date of the order StubHub must provide redress to two groups of eligible","id":2818173,"url":"https://www.ftc.gov/news-events/news/press-releases/2026/04/stubhub-refunding-10-million-fees-consumers-after-deceptive-ticket-pricing","titre":"StubHub Refunding $10 Million in Fees to Consumers After Deceptive Ticket Pricing","pubDate":"Fri, 10 Apr 2026 08:08:44 +0200"},{"id":2703238,"description":"Brussels, 18 February - The European Data Protection Board (EDPB) has adopted a  report on its Coordinated Enforcement Framework (CEF) action on the right to be forgotten (Art.17 GDPR) .  The  Board selected this topic  as it is one of the most frequently exercised GDPR rights and one about which DPAs frequently receive complaints from individuals. The main objectives of this coordinated action are to ensure that the right to erasure is effectively exercised by individuals in Europe and understand how controllers comply with this right in practice. In addition, the EDPB identified good practices and the most important related challenges, with the aim of providing further guidance on this topic.  Throughout 2025, 32 DPAs across Europe took part in this initiative. More specifically, 9 DPAs have initiated new formal investigations or have continued ongoing ones, and 23 DPAs carried out a fact-finding exercise. A total of 764 controllers across Europe responded to the action, ranging from small and medium-sized enterprises (SMEs) to big companies active in many different industries and fields, as well as various types of public entities. The results of these national actions have been aggregated and analysed together allowing for targeted follow-up on both national and EU level.   Areas of improvement and main challenges The report lists the issues that were identified, along with a series of recommendations addressed to controllers, to help them implement the right to erasure. Seven recurring main challenges were identified by DPAs. The results confirmed some of the findings of the 2024 coordinated action on the right of access , for example when it comes to the lack of appropriate internal procedures to handle requests, or the lack of sufficient information provided to individuals. In addition, participating DPAs reported specific findings related to the reliance by some controllers on inefficient anonymisation techniques to handle erasure requests as an alternative to deletion. DPAs also noted inconsistent practices, and the difficulties faced by controllers regarding the determination of retention periods and the deletion of personal data in the context of back-ups. In addition, as the right to erasure is not an absolute right, some controllers face difficulties in assessing and applying the conditions for the exercise of this right, including in carrying out the different balancing tests between the right to erasure and other rights and freedoms.   Follow-up to help organisations comply  Extensive guidance, documents and templates exist at national level to help controllers comply with the right of erasure and help individuals exercise this right. In line with the Helsinki Statement’s objectives of making GDPR compliance easier and ensuring consistent interpretation and enforcement across Europe, the extensive guidance and templates already available at national level will be leveraged at EDPB level where appropriate.   Background and next steps The CEF is a key action of the EDPB under its 2024-2027 Strategy , aimed at streamlining enforcement and cooperation among DPAs.  In 2023, the EDPB published the report on its first coordinated action on the  use of cloud-based services by the public sector . In 2024, the EDPB also published the report on the outcome of the second coordinated action on the  designation and position of Data Protection Officers . In 2025, the EDPB issued the report on its third coordination action on the  implementation of the right of access . The CEF 2026 action will be on the  obligations of transparency and information under the GDPR .   For further information: DA DPA:   EDPB vedtager rapport om dataansvarliges overholdelse af retten til sletning EL DPA: Ολοκλήρωση της συντονισμένης δράσης του","source":"EDPB News","pubDate":"Wed, 18 Feb 2026 15:27:14 +0100","url":"https://www.edpb.europa.eu/news/news/2026/edpb-identifies-challenges-hindering-full-implementation-right-erasure_en","titre":"EDPB identifies challenges hindering the full implementation of the right to erasure"},{"source":"Federal Trade Commission - Protecting America's Consumers","description":"Today, the Federal Trade Commission announced that grocery delivery provider Instacart will pay $60 million in refunds to consumers to settle allegations that the company engaged in numerous unlawful tactics that harmed shoppers and raised the cost of grocery shopping for Americans. Instacart will be required to cease its deceptive practices under a proposed FTC order, and consumers who were charged for Instacart+ without their express informed consent will receive refunds as a result of the settlement. “Instacart misled consumers by advertising free delivery services—and then charging consumers to have groceries delivered—and failing to disclose to consumers that signed up for a free trial that they would be automatically enrolled into its subscription program,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “The FTC is focused on monitoring online delivery services to ensure that competitors are transparently competing on price and delivery terms.” The FTC has alleged that Instacart engaged in a variety of deceptive tactics that misled consumers and caused them to pay more in fees, while depriving consumers of refunds. Specifically, the FTC alleges that Instacart: Falsely advertised “free delivery” to consumers on their first order Instacart’s claims of “free delivery” are false because consumers still must pay a mandatory “service fee” to get their groceries delivered. These mandatory service fees add as much as 15% to the order cost and were not clearly disclosed to consumers. Falsely advertised a “100% satisfaction guarantee,” implying that it will provide full refunds when consumers are not fully satisfied Consumers who experience late deliveries or unprofessional service typically are not offered full refunds and instead are given only a small credit that can be used toward a future order. Instacart hid the refund option from the “self-service” menu that consumers use to report problems with their orders, leading many consumers to erroneously believe they could receive only a credit toward a future order rather than a refund. Failed to clearly disclose terms relating to Instacart+ membership enrollment Instacart’s free-trial enrollment process for Instacart+ did not adequately disclose that consumers would be charged for memberships at the end of their trials, nor did it disclose Instacart’s restrictive refund policy. As a result, Instacart has charged many consumers for paid memberships without their express informed consent. Hundreds of thousands of consumers have been charged membership fees without receiving benefits from the membership or getting refunds. Under the terms of the FTC’s proposed settlement order , Instacart will be prohibited from making misrepresentations concerning the costs of delivery services and satisfaction guarantees. Instacart must also clearly and conspicuously disclose the terms and obtain express informed consent for transactions involving subscription models where consumers are automatically charged unless they actively opt out. The Commission vote approving the stipulated final order was 2-0. The FTC filed the proposed order in the U.S. District Court for the Northern District of California. NOTE:  Stipulated final orders have the force of law when approved and signed by the District Court","id":2582987,"titre":"Instacart to Pay $60 Million in Consumer Refunds to Settle FTC Lawsuit Over Allegations it Engaged in Deceptive Tactics","url":"https://www.ftc.gov/news-events/news/press-releases/2025/12/instacart-pay-60-million-consumer-refunds-settle-ftc-lawsuit-over-allegations-it-engaged-deceptive","pubDate":"Fri, 19 Dec 2025 09:48:21 +0100"},{"titre":"FTC Will Require Illusory Systems to Return Money Stolen by Hackers and Implement an Information Security Program","url":"https://www.ftc.gov/news-events/news/press-releases/2025/12/ftc-will-require-illusory-systems-return-money-stolen-hackers-implement-information-security-program","pubDate":"Wed, 17 Dec 2025 09:50:37 +0100","source":"Federal Trade Commission - Protecting America's Consumers","description":"The Federal Trade Commission is taking action against Illusory Systems Inc. for failing to implement adequate data security measures, leading to a major security breach in which hackers stole $186 million from consumers. Under a proposed order settling the FTC’s allegations, Utah-based Illusory, which does business as Nomad, will be required to implement an information security program to address numerous alleged security failures and to return recovered money to affected consumers. “The FTC Act requires companies to take reasonable security measures,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “It’s important that companies live up to their security promises to consumers.” In its complaint , the FTC alleged that Nomad prominently touted its security in its advertising, claiming that it offered “security-first” services. The FTC, however, alleged that the company failed to live up to these promises by failing to: use secure coding practices; implement processes for receiving and addressing vulnerability reports and responding to security incidents; and utilize widely known technologies that might have helped mitigate consumer losses. According to the complaint, in June 2022, Nomad introduced inadequately tested code that included a significant vulnerability. Just over a month later, hackers began exploiting the vulnerability. The FTC alleged that Nomad failed to respond to the attack in time because of its inadequate security and incident response measures, which led to the loss of $186 million. The company was able to recover some money, but consumers lost approximately $100 million. Nomad was warned about the dangers of inadequate testing as well as the need to ensure it had adequate staff and security in place. The company, however, failed to implement basic safety measures that would mitigate consumer losses, the FTC alleged. Under the proposed order , Nomad will be prohibited from making misrepresentations about its security practices. In addition, the company will also be required to: Implement a comprehensive information security program that is designed to protect consumers from theft or other unauthorized access and address the security issues outlined in the FTC’s complaint; Obtain biennial assessments of its information security program by an independent third party and cooperate with the third-party assessor; and Return to consumers money recovered following the security breach that was not already returned to customers. The Commission voted 2-0 to accept the proposed complaint and order for public comment. The FTC will publish a description of the consent agreement package in the Federal Register soon. The agreement will be subject to public comment for 30 days after publication in the Federal Register after which the Commission will decide whether to make the proposed consent order final. Instructions for filing comments will appear in the published notice. Once processed, comments will be posted on Regulations.gov. NOTE:  The Commission issues an administrative complaint when it has “reason to believe” that the law has been or is being violated, and it appears to the Commission that a proceeding is in the public interest. When the Commission issues a consent order on a final basis, it carries the force of law with respect to future actions. Each violation of such an order may result in a civil penalty of up to $51,744. The lead staff attorneys on this matter are M. Hasan Aijaz and Julia Horwitz with the FTC’s Bureau of Consumer","id":2577895},{"pubDate":"Thu, 09 Oct 2025 15:53:21 +0200","titre":"DMA and GDPR: EDPB and European Commission endorse joint guidelines to clarify common touchpoints","url":"https://www.edpb.europa.eu/news/news/2025/dma-and-gdpr-edpb-and-european-commission-endorse-joint-guidelines-clarify-common_en","id":2425502,"description":"Brussels, 09 October - The European Data Protection Board (EDPB) and the European Commission endorsed joint guidelines on the interplay between the Digital Markets Act (DMA) and the General Data Protection Regulation (GDPR) . These are the first joint guidelines by the Board and the European Commission. In line with its 2024-2027 Strategy and the recent Helsinki Statement’s objectives to make GDPR compliance easier and strengthen consistency, the EDPB has cooperated with the European Commission, each within their respective mandates, to facilitate the coherent application of the DMA*and GDPR and to increase legal certainty for gatekeepers, business users, beneficiaries and individuals. EDPB Chair Anu Talus said:   “These joint guidelines are the result of a fruitful cooperation between the EDPB and the European Commission. This is the first time that the EDPB and the European Commission prepare guidelines jointly. This approach maximises usefulness of the guidance by simplifying compliance for businesses and bringing enhanced legal certainty to them.  The guidelines will help gatekeepers, business users and individuals to better understand their obligations and rights under the DMA, and ensure a consistent, effective and complementary application of the DMA and EU data protection law.” How the DMA and the GDPR interact The DMA and the GDPR both protect individuals in the digital landscape , but their goals are complementary as they address interconnected challenges: individual rights and privacy in case of the GDPR and fairness and contestability of digital markets under the DMA.    Several activities regulated by the DMA entail the processing of personal data by gatekeepers and, in several provisions, the DMA explicitly refers to definitions and concepts included in the GDPR. The joint guidelines clarify how gatekeepers can implement these DMA provisions in accordance with EU data protection law . For example, the EDPB and the Commission specify which elements gatekeepers should consider in order to comply with the requirements of specific choice and valid consent under Art. 5(2) DMA and the GDPR, and thus to lawfully combine or cross-use personal data in core platform services. The EDPB and the Commission also address other provisions including those related to the distribution of third party apps and stores, data portability, data access requests and interoperability of messaging services.   Next steps The Board and the Commission have just launched a joint public consultation on the first version of the guidelines which will be open until 4 December 2025 .  This will be an opportunity for stakeholders to comment and provide feedback. All submissions will be published on the DMA website to which a link will be included on the EDPB website, after the consultation period has closed. The final text, incorporating input received during the consultation, will be prepared jointly by the Board and the Commission, and will be adopted by the EDPB and European Commission.   More guidelines on the way Following these first joint guidelines with the Commission, further work is underway to clarify the new cross-regulatory landscape and maintain coherent and consistent safeguards for the protection of personal data. In this regard, the EDPB is working with the Commission, specifically with the AI Office, on joint guidelines on the interplay between the AI Act and EU data protection laws. Note to editors: The Digital Markets Act is one of the first regulatory tools that aims to tackle unfair practices of gatekeepers in digital markets. Gatekeepers are large digital platforms providing core platform services, such as online search engines, app stores, and messenger services. The main objective of the DMA is to make the markets in the digital sector fairer and more contestable. ","source":"EDPB News"},{"pubDate":"Thu, 10 Apr 2025 09:51:48 +0200","url":"https://www.ftc.gov/news-events/news/press-releases/2025/01/ftc-surveillance-pricing-study-indicates-wide-range-personal-data-used-set-individualized-consumer","titre":"FTC Surveillance Pricing Study Indicates Wide Range of Personal Data Used to Set Individualized Consumer Prices","source":"Federal Trade Commission Concurrence communiqués","id":2044739,"description":"The Federal Trade Commission’s initial findings from its surveillance pricing market study revealed that details like a person’s precise location or browser history can be frequently used to target individual consumers with different prices for the same goods and services. The staff perspective is based on an examination of documents obtained by FTC staff’s 6(b) orders sent to  several companies in July aiming to better understand the shadowy market that third-party intermediaries use to set individualized prices for products and services based on consumers’ characteristics and behaviors, like location, demographics, browsing patterns and shopping history. Staff found that consumer behaviors ranging from mouse movements on a webpage to the type of products that consumers leave unpurchased in an online shopping cart can be tracked and used by retailers to tailor consumer pricing. “Initial staff findings show that retailers frequently use people’s personal information to set targeted, tailored prices for goods and services—from a person's location and demographics, down to their mouse movements on a webpage,” said FTC Chair Lina M. Khan. “The FTC should continue to investigate surveillance pricing practices because Americans deserve to know how their private data is being used to set the prices they pay and whether firms are charging different people different prices for the same good or service.” The FTC’s study of the 6(b) documents is still ongoing. The staff perspective is based on an initial analysis of documents provided by Mastercard, Accenture, PROS, Bloomreach, Revionics and McKinsey & Co. Image The FTC’s 6(b) study focuses on intermediary firms, which are the middlemen hired by retailers that can algorithmically tweak and target their prices. Instead of a price or promotion being a static feature of a product, the same product could have a different price or promotion based on a variety of inputs—including consumer-related data and their behaviors and preferences, the location, time, and channels by which a consumer buys the product, according to the perspective. The agency will only release information obtained from a 6(b) study as long as all data has been aggregated or anonymized to protect confidential trade secrets from company respondents, and therefore the staff perspective only includes hypothetical examples of surveillance pricing.  The staff perspective found that some 6(b) respondents can determine individualized and different pricing and discounts based on granular consumer data, like a cosmetics company targeting promotions to specific skin types and skin tones. The perspective also found that the intermediaries the FTC examined can show higher priced products based on consumers’ search and purchase activity. As one hypothetical outlined, a consumer who is profiled as a new parent may intentionally be shown higher priced baby thermometers on the first page of their search results. The FTC staff found that the intermediaries worked with at least 250 clients that sell goods or services ranging from grocery stores to apparel retailers. The FTC found that widespread adoption of this practice may fundamentally upend how consumers buy products and how companies compete. As the FTC continues its work in this area, it is issuing a request for information   today seeking public comment on consumers’ experiences with surveillance pricing. The RFI also asks for comments from businesses about whether surveillance pricing tools can lead to competitors gaining an unfair advantage, and whether gig workers or employees have been impacted by the use of surveillance pricing to determine their compensation. Comments are due by April 17. The Commission voted 3-2 to allow staff to issue the report. Commissioners Andrew Ferguson and Melissa Holyoak issued a dissenting statement related to the release of the initial research summaries. The FTC has additional resources on the interim"}]