: FleetCor and its CEO will pay $100 million to settle a Federal Trade Commission administrative action alleging that the company charged its customers, who overwhelmingly are small businesses, undisclosed fees in connection with their use of fuel cards that FleetCor falsely promised businesses would save them money. In a complaint first filed in federal court in 2019 , the FTC alleged that FleetCor Technologies Inc., now known as Corpay Inc., and its CEO Ronald Clarke imposed a broad array of unauthorized fees that its customers never knew about and did not agree to pay, totaling hundreds of millions of dollars and harming tens of thousands of customers. In addition, FleetCor charged late fees to customers who had either paid on time or were prevented by FleetCor from paying on time. FleetCor also misrepresented the gas savings, fraud-control features, and fees associated with its fuel cards. “FleetCor deceived its small business customers by promising fuel savings that never materialized, while unfairly cha[...]
: The Federal Trade Commission is taking action against Illusory Systems Inc. for failing to implement adequate data security measures, leading to a major security breach in which hackers stole $186 million from consumers. Under a proposed order settling the FTC’s allegations, Utah-based Illusory, which does business as Nomad, will be required to implement an information security program to address numerous alleged security failures and to return recovered money to affected consumers. “The FTC Act requires companies to take reasonable security measures,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “It’s important that companies live up to their security promises to consumers.” In its complaint , the FTC alleged that Nomad prominently touted its security in its advertising, claiming that it offered “security-first” services. The FTC, however, alleged that the company failed to live up to these promises by failing to: use secure coding practices; implement processes for recei[...]
: Brussels, 09 October - The European Data Protection Board (EDPB) and the European Commission endorsed joint guidelines on the interplay between the Digital Markets Act (DMA) and the General Data Protection Regulation (GDPR) . These are the first joint guidelines by the Board and the European Commission. In line with its 2024-2027 Strategy and the recent Helsinki Statement’s objectives to make GDPR compliance easier and strengthen consistency, the EDPB has cooperated with the European Commission, each within their respective mandates, to facilitate the coherent application of the DMA*and GDPR and to increase legal certainty for gatekeepers, business users, beneficiaries and individuals. EDPB Chair Anu Talus said: “These joint guidelines are the result of a fruitful cooperation between the EDPB and the European Commission. This is the first time that the EDPB and the European Commission prepare guidelines jointly. This approach maximises usefulness of the guidance by simplifying compliance for businesses and[...]
: Defendants behind a wide-ranging operation known as Growth Cave, including its co-CEOs, are permanently banned from marketing and selling business opportunities and credit repair programs as part of an FTC settlement to resolve allegations that their scheme cost consumers nearly $50 million. As part of that settlement, Growth Cave’s co-CEOs alsowill be required to liquidate millions of dollars’ worth of assets, including a multimillion-dollar house, to provide consumer redress. “On day one, the Trump-Vance FTC reprioritized combatting fraud that harms American markets. Today’s successful resolution demonstrates that the Commission is focused on protecting our markets from dishonest actors,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. The FTC sued Growth Cave in February 2025, alleging that consumers were deceived by false promises of significant income. Growth Cave allegedly offered numerous business opportunities, which regularly failed to deliver the promised results[...]
: By: Susannah Tredwell , Manager of Library Services at DLA Piper (Canada) LLP and James Bachmann , Instructional Librarian, Law Library, University of British Columbia Since 1988, when CALL/ACBD’s Copyright Committee was first set up, CALL/ACBD has advocated for its members' interests in the area of copyright. While the primary focus of CALL/ACBD’s copyright advocacy over the last few years has been on Crown copyright and primary law, CALL/ACBD hasalso made submissions about such areas as fair dealing and licencing. CALL/ACBD sees this work as not only supporting the needs of its members but also as serving the interests of access to justice as a whole. Continuing this work, on January 18, 2022 CALL/ACBD, along with Library Futures Institute, will act as an intervener in the Supreme Court of Canada case Society of Composers, Authors and Music Publishers of Canada, et al. v. Entertainment Software Association, et al. Kim Nayyer, CALL/ACBD’s President, and Robert Janes of JFK Law will be representing CALL[...]
: The Federal Trade Commission today began enforcing the TAKE IT DOWN Act (TIDA), a law requiring platforms, at the request of victims, to remove intimate photos or videos shared online without victims’ consent. As part of its enforcement role, the FTC has launched TakeItDown.ftc.gov , a website allowing victims and survivors to submit complaints about platforms that have failed to act on valid requests for the removal of nonconsensual intimate images. The website also accepts complaints about platforms that have failed to create a process for people to request removal of these images. “Thanks to First Lady Melania Trump’s dedication, the public, especially children, will have recourse against digital exploitation and extortion,” said FTC Chairman Andrew N. Ferguson. “In the age of AI, anyone can be targeted, and that becomes even more appalling if children are involved. The TAKE IT DOWN Act empowers families and provides the FTC with an effective tool to protect minors against this form of abuse.” The FTC enf[...]
: Brussels, 06 May - During its latest plenary, the European Data Protection Board (EDPB) adopted an opinion on the European Commission’s draft adequacy decision under the GDPR concerning the European Patent Organisation (EPO) . In addition, the Board adopted an opinion on the European Commission’s proposal to extend the validity of the UK adequacy decisions under the GDPR and the Law Enforcement Directive (LED) . Finally, the EDPB agreed to grant the status of observer to the Personal Data Protection Agency of Bosnia and Herzegovina. Adequate protection of personal data by the EPO At the European Commission’s request, the Board adopted an opinion on the Commission’s draft adequacy decision regarding the European Patent Organisation (EPO). Once formally adopted by the Commission, this will be the first adequacy decision concerning an international organisation and not a country or a region. An adequacy decision is a key-mechanism in EU data protection legislation which allows the European Commission to deter[...]
: First INFORM Consumers Act enforcement case filed against online marketplace Temu kkrown September 5, 2025 | 10:00AM First INFORM Consumers Act enforcement case filed against online marketplace Temu Online marketplaces and third party sellers looking for a refresher on the INFORM Consumers Act should look no further than the recent settlement with Whaleco, Inc., which operates the online marketplace Temu. The complaint alleges the company failed to provide online shoppers with required information and tools. This is the first case brought to enforce the INFORM Act. The INFORM Act, which went into effect in 2023, seeks to make online transactions more transparent. Among other things, the law requires online marketplaces to collect, verify, and disclose certain information about high-volume third party sellers. ( Informing Businesses about the INFORM Consumers Act has more on how the law defines terms, what’s required of online marketplaces, and the substantial penalties the FTC and state law enforcers may se[...]
: The Federal Trade Commission finalized an order with General Motors and OnStar settling allegations that they collected, used, and sold consumers’ precise geolocation data and driving behavior data from millions of vehicles without adequately notifying consumers and obtaining their affirmative consent. Under the order finalized by the Commission, General Motors LLC, General Motors Holdings LLC, and OnStar, LLC (collectively GM), which are owned by General Motors Company, are prohibited from sharing certain consumer data with consumer reporting agencies. They also are required to take steps to provide greater transparency and choice to consumers over the collection, use, and disclosure of their connected vehicle data. In a complaint first announced in January 2025, the FTC alleged that GM used a misleading enrollment process to get consumers to sign up for its OnStar connected vehicle service and OnStar Smart Driver feature. The FTC also alleged that GM failed to clearly disclose that it collected consumers’ [...]
: Brussels, 12 September - During its September plenary meeting, the European Data Protection Board (EDPB) has adopted guidelines on the interplay between the Digital Services Act (DSA) and the General Data Protection Regulation (GDPR) . These are the first set of EDPB guidelines on the interplay between the GDPR and the EU’s recently adopted digital laws. The DSA aims to complement the rules of the GDPR to ensure the highest level of protection of fundamental rights in the digital space. Its main goal is to create a safer online environment in which the fundamental rights of all users, including the right to freedom of expression, are protected. It applies to online intermediary services , such as search engines and platforms. Several provisions included in the DSA entail the processing of personal data by intermediary service providers. The EDPB guidelines contribute to the consistent application of the DSA and of the GDPR, insofar as some provisions of the DSA concern the processing of personal data by inte[...]
: Amazon will pay $2.25 million in civil penalties to settle Federal Trade Commission allegations that the online retail giant knowingly violated the Fair Credit Reporting Act (FCRA) by refusing to provide transaction records to consumers whose personal information was used by identity thieves to commit fraud. The complaint , filed by the Department of Justice upon notification and referral from the FTC, alleged that in numerous instances, Amazon.com Inc. failed to comply with Section 609(e) of the FCRA, which requires companies to, within 30 days of a consumer’s request, provide victims of identity theft with application and business transaction records about fraudulent transactions made in their names. According to the complaint, Amazon had no written policy to respond to Section 609(e) requests until early 2025, after it learned of the FTC’s investigation, despite prior outreach from FTC staff advising the company to review its compliance with Section 609(e). “Amazon often put identity theft victims through[...]
: Public consultation on the draft BEREC Work Programme 2027 yannick.stephan Thu, 01/10/2026 - 09:00 Breadcrumbs Public Consultations & Calls for Inputs Deadline to submit contributions: 31 October 2026 In January this year, BEREC adopted the Outline BEREC Work Programme 2027 , which reflected BEREC's objectives for the upcoming year. BEREC launched a first Call for inputs on the Work Programme 2027 from 27 February to 15 April. During the call for proposals, several additional actions were identified. Considering the early input received, during the 68th BEREC ordinary meetings (1-2 October 2026), the Board of Regulators adopted the draft BEREC Work Programme 2027 [BoR (26) 142] for public consultation. Background BEREC prepares its annual work programme in accordance with Article 21 of the BEREC Regulation and the BEREC Strategy 2026-2030 to guide how it organises and prioritises its work towards clearly defined objectives. The 2027 draft work programme was developed inclusively and transparently, with cont[...]
: The Federal Trade Commission secured a settlement agreement with Southern Glazer’s Wine and Spirits LLC, the nation’s largest distributor of wine and spirits, that will redress allegedly illegal price discrimination practices and make it easier for small businesses to compete against large chain retailers. The sweeping settlement covers nearly all Southern wine and spirits sales to the five largest chain retailers in 26 states. The settlement willalso provide direct cash payments to harmed small businesses if an independent monitor finds that Southern violates the settlement order going forward. “This settlement marks a significant milestone for the FTC in its enforcement of the Robinson-Patman Act, which Congress enacted to empower small businesses to compete against large ones,” said Daniel Guarnera, Director of the FTC’s Bureau of Competition. “Small businesses are an invaluable part of the American economy and way of life. The FTC is committed to ensuring that all businesses, no matter their size, can c[...]
: Planning a social media marketing campaign? Read this first. lfair November 13, 2018 | 12:24PM Planning a social media marketing campaign? Read this first. By Lesley Fair It started as one of those “run it up the flagpole” ideas to enlist big-name gymnasts to promote a brand of mosquito repellent just as news stories about the 2016 Brazil Olympics were sounding warnings about the Zika virus. Public relations firm Creaxion Corporation and specialty sports magazine publisher Inside Publications used a variety of digital strategies on behalf of the brand: athlete endorsements, social media posts, “advertorials,” and consumer reviews. But according to the FTC’s complaint , their efforts violated established FTC advertising principles. Which of those strategies are you using? And are you avoiding legal pitfalls by making appropriate disclosures? Creaxion – an Atlanta-based marketing and PR company – was approached by client HealthPro Brands to help launch its mosquito repellent. They agreed Creaxion would produce[...]
: Brussels, 18 February - The European Data Protection Board (EDPB) has adopted a report on its Coordinated Enforcement Framework (CEF) action on the right to be forgotten (Art.17 GDPR) . The Board selected this topic as it is one of the most frequently exercised GDPR rights and one about which DPAs frequently receive complaints from individuals. The main objectives of this coordinated action are to ensure that the right to erasure is effectively exercised by individuals in Europe and understand how controllers comply with this right in practice. In addition, the EDPB identified good practices and the most important related challenges, with the aim of providing further guidance on this topic. Throughout 2025, 32 DPAs across Europe took part in this initiative. More specifically, 9 DPAs have initiated new formal investigations or have continued ongoing ones, and 23 DPAs carried out a fact-finding exercise. A total of 764 controllers across Europe responded to the action, ranging from small and medium-sized[...]
: New data from the Federal Trade Commission reveal that people reported losing a staggering $3.5 billion to imposter scams in 2025, with reported losses increasing nearly three times since 2020. FTC data also show that people reported imposter scams more than any other fraud category in 2025—nearly one in three fraud reports were about imposter scams. These scams lured consumers through text, phone, email, social media, search engine results and other means. Some of the costliest impersonation scams start with a fake security alert, often from a bank. People are convinced to move money to “protect” it, with their losses often limited only by their available funds. Last year, people reported losing nearly $1 billion to business impersonators with the highest reported losses to bank impersonators—and about $920 million to government impersonators, up from $866 million and $789 million respectively in 2024. The FTC has seen a striking increase in reported fraud losses to all types of fraud—about $16 billion was [...]
: A clothes look at the RN database: Q&A with FTC staff lfair October 5, 2017 | 11:18AM A clothes look at the RN database: Q&A with FTC staff By Lesley Fair It’s not much bigger than a postage stamp, but the label on many textile, wool, and fur products provides important information, including fiber content, country of origin, and a company name or Registered Identification Number (RN). The FTC administers the RN system and industry members will want to check out recent upgrades to the RN website . With RNs and labels on our mind, we asked some common RN-related questions to attorney Josh Millard, whom we’d label as one of the FTC’s go-to people on the subject. First things first. What’s an RN? JOSH: A Registered Identification Number (RN) is a numerical designation – the prefix RN followed by a set of digits – that identifies the company responsible for marketing, distributing or otherwise handling a product covered by the Textile, Wool, and Fur Acts. Because some labels are small and some company names a[...]
: The Federal Trade Commission’s initial findings from its surveillance pricing market study revealed that details like a person’s precise location or browser history can be frequently used to target individual consumers with different prices for the same goods and services. The staff perspective is based on an examination of documents obtained by FTC staff’s 6(b) orders sent to several companies in July aiming to better understand the shadowy market that third-party intermediaries use to set individualized prices for products and services based on consumers’ characteristics and behaviors, like location, demographics, browsing patterns and shopping history. Staff found that consumer behaviors ranging from mouse movements on a webpage to the type of products that consumers leave unpurchased in an online shopping cart can be tracked and used by retailers to tailor consumer pricing. “Initial staff findings show that retailers frequently use people’s personal information to set targeted, tailored prices for goods[...]
: Practice Fusion case suggests 6 health privacy pointers lfair June 8, 2016 | 9:01AM Practice Fusion case suggests 6 health privacy pointers By Lesley Fair Combine two of the most talked-about consumer protection topics – health privacy and consumer-generated online content – and what do you get? A proposed FTC settlement with Practice Fusion, the largest cloud-based electronic health records company in the country, and six compliance tips for others in the industry. One of San Francisco-based Practice Fusion’s primary products is an electronic records system for outpatient providers. In 2009, the company launched “Patient Fusion,” an online portal where patients whose providers were already using Practice Fusion could view or download their health information or transmit it to another provider. Patient Fusion also let patients send and receive secure messages from their providers. Fast forward several years and the company decided to expand Patient Fusion to include a public directory where current and prosp[...]
: Fighting Coronavirus scams: Taking stock chundycz May 8, 2020 | 9:01AM Fighting Coronavirus scams: Taking stock By Andrew Smith, Director, FTC Bureau of Consumer Protection Since the beginning of the COVID-19 crisis, the FTC has released dozens of warning letters against people trying to make an illegal buck off the Coronavirus. More than a month in, it seems like a good time to look back at what’s happened. If you follow this blog, you’ll know these have been busy weeks – with advice about spotting the many scams we’re all facing, news of the warning letters sent on a wide range of scams, and some enforcement actions filed. You might wonder: Why send letters? Why not just sue the !*$@&#? Fair question. But the letters are working. And, given the scope of the scams out there right now, we want to get the best and fastest results we can with the most efficient tool we have. Right now, for these Coronavirus-related issues, that’s warning letters. In general, here’s how it goes: We spot someone advertising some[...]