: Today, the Federal Trade Commission announced that grocery delivery provider Instacart will pay $60 million in refunds to consumers to settle allegations that the company engaged in numerous unlawful tactics that harmed shoppers and raised the cost of grocery shopping for Americans. Instacart will be required to cease its deceptive practices under a proposed FTC order, and consumers who were charged for Instacart+ without their express informed consent will receive refunds as a result of the settlement. “Instacart misled consumers by advertising free delivery services—and then charging consumers to have groceries delivered—and failing to disclose to consumers that signed up for a free trial that they would be automatically enrolled into its subscription program,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “The FTC is focused on monitoring online delivery services to ensure that competitors are transparently competing on price and delivery terms.” The FTC has alleged that[...]
: Brussels, 09 October - The European Data Protection Board (EDPB) and the European Commission endorsed joint guidelines on the interplay between the Digital Markets Act (DMA) and the General Data Protection Regulation (GDPR) . These are the first joint guidelines by the Board and the European Commission. In line with its 2024-2027 Strategy and the recent Helsinki Statement’s objectives to make GDPR compliance easier and strengthen consistency, the EDPB has cooperated with the European Commission, each within their respective mandates, to facilitate the coherent application of the DMA*and GDPR and to increase legal certainty for gatekeepers, business users, beneficiaries and individuals. EDPB Chair Anu Talus said: “These joint guidelines are the result of a fruitful cooperation between the EDPB and the European Commission. This is the first time that the EDPB and the European Commission prepare guidelines jointly. This approach maximises usefulness of the guidance by simplifying compliance for businesses and[...]
: Alexander Mashinsky, the former CEO of cryptocurrency platform Celsius Network Inc. (Celsius), and his business partners, Shlomi Daniel Leon and Hanoch “Nuke” Goldstein, will pay a total of $16.5 million to resolve the Federal Trade Commission’s charges that they deceived users by falsely promising that deposits made to their cryptocurrency platform would be safe and always available. Mashinsky and Leon have also agreed to a ban on marketing or selling products or services that can be used to deposit, exchange, invest or withdraw assets. Similarly, Goldstein has agreed to a ban on marketing or selling retail products or services that can be used to buy, sell, deposit, withdraw, distribute or trade cryptocurrency. In its July 2023 complaint , the FTC alleged that Celsius and its co-founders promised consumers that Celsius was “safer” than a bank or other traditional financial institutions and misrepresented that their deposits were safe because Celsius earned profits at “no risk” to consumers by making secur[...]
: Keep FCRA in the foreground when the subject is background screening chundycz April 9, 2014 | 12:13AM Keep FCRA in the foreground when the subject is background screening By Lesley Fair When the talk turns to Big Data, part of the conversation is about all the public information available about people's lives – and how companies market it to prospective employers, landlords, etc. Two cases just announced by the FTC serve as a cautionary reminder to members of the industry that what they do may be subject to the long-standing consumer protections of the Fair Credit Reporting Act (FCRA) . InfoTrack, an Illinois company, and San Diego-based Instant Checkmate will be paying civil penalties to settle FTC lawsuits that they violated the FCRA. Is it time for an FCRA refresher at your business? Instant Checkmate marketed its reports as a way for prospective employers and landlords to investigate applicants. For example, the company advertised that one of the “GOOD REASONS to get instant criminal checks on anyo[...]
: Amazon will pay $2.25 million in civil penalties to settle Federal Trade Commission allegations that the online retail giant knowingly violated the Fair Credit Reporting Act (FCRA) by refusing to provide transaction records to consumers whose personal information was used by identity thieves to commit fraud. The complaint , filed by the Department of Justice upon notification and referral from the FTC, alleged that in numerous instances, Amazon.com Inc. failed to comply with Section 609(e) of the FCRA, which requires companies to, within 30 days of a consumer’s request, provide victims of identity theft with application and business transaction records about fraudulent transactions made in their names. According to the complaint, Amazon had no written policy to respond to Section 609(e) requests until early 2025, after it learned of the FTC’s investigation, despite prior outreach from FTC staff advising the company to review its compliance with Section 609(e). “Amazon often put identity theft victims through[...]
: Root, root root for the regions lfair September 24, 2018 | 2:03PM Root, root root for the regions By Andrew Smith, Director, FTC Bureau of Consumer Protection T his year eight major league baseball teams are celebrating milestone anniversaries – and so are the FTC’s regional offices. In 1918, the Commission opened the first three of its regional offices. Today, eight regional offices continue to knock it out the park on behalf of America’s consumers. So it’s only fitting that on this momentous day we acknowledge the regional offices’ century of pennant-winning performances. According to the Commission’s 1918 Annual Report, “In order to expedite the greatly increased work of the Commission . . . small branch offices were established in New York, Chicago, and San Francisco.” Over time, the FTC has added other locations for a current total of eight offices in seven regions. Regional staff work with the Bureau of Consumer Protection and the Bureau of Competition on investigations and litigation. But they are in [...]
: Brussels, 12 September - During its September plenary meeting, the European Data Protection Board (EDPB) has adopted guidelines on the interplay between the Digital Services Act (DSA) and the General Data Protection Regulation (GDPR) . These are the first set of EDPB guidelines on the interplay between the GDPR and the EU’s recently adopted digital laws. The DSA aims to complement the rules of the GDPR to ensure the highest level of protection of fundamental rights in the digital space. Its main goal is to create a safer online environment in which the fundamental rights of all users, including the right to freedom of expression, are protected. It applies to online intermediary services , such as search engines and platforms. Several provisions included in the DSA entail the processing of personal data by intermediary service providers. The EDPB guidelines contribute to the consistent application of the DSA and of the GDPR, insofar as some provisions of the DSA concern the processing of personal data by inte[...]
: The Federal Trade Commission is taking action against Illusory Systems Inc. for failing to implement adequate data security measures, leading to a major security breach in which hackers stole $186 million from consumers. Under a proposed order settling the FTC’s allegations, Utah-based Illusory, which does business as Nomad, will be required to implement an information security program to address numerous alleged security failures and to return recovered money to affected consumers. “The FTC Act requires companies to take reasonable security measures,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “It’s important that companies live up to their security promises to consumers.” In its complaint , the FTC alleged that Nomad prominently touted its security in its advertising, claiming that it offered “security-first” services. The FTC, however, alleged that the company failed to live up to these promises by failing to: use secure coding practices; implement processes for recei[...]
: Brussels, 27 April – Today marks the 10th anniversary of the GDPR’s adoption, the first comprehensive data protection framework spanning an entire continent, establishing clear rights for individuals and obligations for organisations across Europe. The moment that led to the creation of the EDPB The GDPR led to the establishment of the European Data Protection Board (EDPB) on 25 May 2018, replacing the Article 29 Working Party that was previously in charge of dealing with issues relating to the protection of personal data. The GDPR gave the Data Protection Authorities (DPAs) stronger enforcement powers and expanded the scope of their work from focusing mainly on national compliance complaints to routinely dealing with cross-border cases. In the past 10 years, the 31 European DPAs comprising the EDPB have worked together to ensure the consistent enforcement of the GDPR and a harmonised data protection approach across Europe. A key role in an evolving digital landscape Today, the GDPR is part of a broader an[...]
: Company to pay $22 million for offering "free" credit scores that turned out to be not so free wfg-adm109 November 19, 2014 | 11:12AM Company to pay $22 million for offering "free" credit scores that turned out to be not so free By Lesley Fair We’ve brought law enforcement actions – dozens of ‘em. We’ve held workshops, issued reports, and sent warning letters. If it takes sky writing, tap dancing, and a float in a Thanksgiving Day parade, we’ll do that, too. But here’s what’s not going to happen. The FTC is not giving up until businesses get the message that: 1) Free means free; and 2) Key terms and conditions have to be clearly and conspicuously disclosed. A $22 million settlement announced by the FTC and the AGs of Illinois and Ohio with a national credit monitoring service advertising so-called “free” credit scores emphasizes that point. Another note for practitioners: It's the FTC's third case alleging violations of ROSCA . One Technologies and related outfits marketed their credit monitoring programs, M[...]
: Speaking of Spokeo: Part 2 — The company’s allegedly bogus endorsements wfg-adm109 June 13, 2012 | 12:25PM Speaking of Spokeo: Part 2 — The company’s allegedly bogus endorsements By Lesley Fair The lawsuit against data broker Spokeo is the FTC’s first Fair Credit Reporting Act case addressing the collection of online info — including data from social networking sites — when used in the context of employment screening. But that’s not the only way the Spokeo settlement touches on social media. The FTC also charged that Spokeo violated Section 5 by having employees post glowing recommendations of the company’s services on news and technology websites without disclosing their true identity. Perhaps just the work of a rogue cubicle occupant? No, said the FTC. According to the complaint , Spokeo directed its employees to write the comments. Spokeo managers then edited what they wrote and had the staffers post the endorsements using account names provided by Spokeo. The purpose, says the FTC, was to give read[...]
: New data from the Federal Trade Commission reveal that people reported losing a staggering $3.5 billion to imposter scams in 2025, with reported losses increasing nearly three times since 2020. FTC data also show that people reported imposter scams more than any other fraud category in 2025—nearly one in three fraud reports were about imposter scams. These scams lured consumers through text, phone, email, social media, search engine results and other means. Some of the costliest impersonation scams start with a fake security alert, often from a bank. People are convinced to move money to “protect” it, with their losses often limited only by their available funds. Last year, people reported losing nearly $1 billion to business impersonators with the highest reported losses to bank impersonators—and about $920 million to government impersonators, up from $866 million and $789 million respectively in 2024. The FTC has seen a striking increase in reported fraud losses to all types of fraud—about $16 billion was [...]