: Practice Fusion case suggests 6 health privacy pointers lfair June 8, 2016 | 9:01AM Practice Fusion case suggests 6 health privacy pointers By Lesley Fair Combine two of the most talked-about consumer protection topics – health privacy and consumer-generated online content – and what do you get? A proposed FTC settlement withPractice Fusion, the largest cloud-based electronic health records company in the country, and six compliance tips for others in the industry. One of San Francisco-based Practice Fusion’s primary products is an electronic records system for outpatient providers. In 2009, the company launched “Patient Fusion,” an online portal where patients whose providers were already using Practice Fusion could view or download their health information or transmit it to another provider. Patient Fusion also let patients send and receive secure messages from their providers. Fast forward several years and the company decided to expand Patient Fusion to include a public directory where current and prosp[...]
: The Federal Trade Commission finalized orders requiring Cox Media Group (CMG) and two other firms to pay a total of $930,000 to settle allegations they deceived customers by falsely claiming to offer an AI-powered service that could target localized ads based on conversations captured from consumers’ smart devices and that consumers had opted into such targeting. In three separate complaints first announced in May , the FTC alleged that Georgia-based media and marketing company CMG Media Corporation, which does business as Cox Media Group , and two marketing firms it worked with, New Hampshire-based MindSift LLC and Wisconsin-based 1010 Digital Works LLC , deceived customers by claiming they used a special algorithm to listen in on and detect pertinent conversations from smart devices in order to target ads to consumers within a specific geographic region. Contrary to these companies’ claims, however, the marketing service wasn’t based on voice data, and consumers hadn’t opted into this service. If the s[...]
: First FTC ROSCA case challenges bogus BOGO and "free" claims wfg-adm109 October 21, 2014 | 12:02PM First FTC ROSCA case challenges bogus BOGO and "free" claims By Lesley Fair It’s called ROSCA – the Restore Online Shoppers’ Confidence Act – and it prohibits marketers from charging consumers for an online transaction unless the marketer has clearly disclosed all material terms of the deal and received the consumer’s express informed consent. Your e-commerce clients will want to know about the FTC’s first ROSCA case , filed recently in Nevada. According to the lawsuit, Health Formulas, LLC and a tangle of related California- and Nevada-based companies and individuals – consumers may know them as Simple Pure Nutrition – pitched a variety of products for weight loss, muscle building, virility, and skin care. The defendants advertised diet supplements like Pure Green Coffee Bean Plus and RKG Extreme as a shortcut to drop the pounds: “Burn fat without diet or exercise,” “Extreme weight loss!” “Shed pounds fast!” “[...]
: Stick with Security: Require secure passwords and authentication lfair August 11, 2017 | 10:47AM Stick with Security: Require secure passwords and authentication By Thomas B. Pahl, Acting Director, FTC Bureau of Consumer Protection To make it harder for hackers to bluff their way onto a computer network, careful companies follow the advice of Start with Security and require strong authentication practices . We’ve considered FTC settlements, closed investigations, and the questions we get from businesses about implementing good authentication “hygiene.” Here are some tips on using effective authentication procedures to help safeguard your network. Insist on long, complex, and unique passwords. A password’s very reason for being is to be easy for a user to remember, but hard for a fraudster to figure out. Obvious choices like ABCABC, 121212, or qwerty are the digital equivalent of a “hack me” sign. Furthermore, experts have determined that passphrases or longer passwords are generally harder to crack. The smar[...]
: Buckle up for a two-lane look at car buying lfair July 30, 2020 | 1:04PM Buckle up for a two-lane look at car buying By Lesley Fair It’s one of the biggest purchases people make, but two new FTC staff reports examine some common pitfalls when consumers are in the market for a car. Buckle down and read the Bureau of Consumer Protection’s Buckle Up: Navigating Auto Sales and Financing , which focuses on the challenges buyers face in getting accurate, understandable information when shopping for a vehicle. Not in the auto business? Not so fast. The deep-dive analysis of Buckle Up and an accompanying report by BCP staff and the Bureau of Economics – The Auto Buyer Study: Lessons From In-Depth Consumer Interviews And Related Research – offer insights into the perception and behavior of consumers in the study that can apply to other industries. The FTC’s interest in auto-related transactions goes back decades. (Check out Volume 1 of Federal Trade Commission Decisions for a 1919 case regarding deception in the s[...]
: Sign of the times? Protecting your company from B2B deception lfair December 9, 2019 | 2:09PM Sign of the times? Protecting your company from B2B deception By Lesley Fair They may look like invoices sent to business owners for posters they may need to display in the workplace. But we think of them as un voices – deceptively worded solicitations that tried to sell companies posters that are readily available for free. A law enforcement action just settled by the FTC and Florida Attorney General offers tips on protecting your business from this form of B2B deception. According to the FTC and AG, four defendants with ties to Texas and Florida – Starwood Consulting, Starwood Capital, Corporate Poster Supply, and Thomas Henry Fred, Jr. – sent letters to businesses across the country with the goal of tricking them into paying $84 for posters about labor practices. To perfect their pitch, the letters had the look of invoices from government agencies or other authorities and warned recipients that they had two choic[...]
: Brussels, 20 January - The European Data Protection Board (EDPB) has adopted a report on the implementation of the right of access by controllers . The report summarises the outcome of a series of coordinated national actions carried out in 2024 under the Coordinated Enforcement Framework (CEF). It lists the issues that were observed for some controllers, along with a series of recommendations to help them implement the right of access. A central element is controllers’ awareness of the EDPB Guidelines 01/2022 on data subjects rights – Right of access and whether these guidelines were followed in practice. EDPB Deputy Chair Zdravko Vukíc said: “The CEF is a valuable initiative that helps strengthen the cooperation among Data Protection Authorities (DPAs): by tackling selected topics in a coordinated fashion, they achieve greater efficiency and more consistency. How controllers implement the right of access lies at the heart of data protection and it is one of the most frequently exercised data subject rights[...]
: i-Dressup and a data security mess-up lfair April 24, 2019 | 3:08PM i-Dressup and a data security mess-up By Lesley Fair Kids love to play dress-up, but parents wouldn’t want them rummaging through the attic or climbing to the top shelf of the wardrobe without permission and proper supervision. The i-Dressup.com website offered users – including children – a virtual way to play dress-up and design clothes without those potential dangers. But according to an FTC complaint, Unixiz, Inc. , the company behind i-Dressup, violated the Children’s Online Privacy Protection Act in ways that created different kinds of risks. COPPA puts two separate sets of protections in place to help keep parents in control of personal information collected from their kids online. First, COPPA-covered companies must clearly disclose their information policies and get parental consent before collecting personal information from children under 13. Second, companies must provide reasonable and appropriate security for the data they coll[...]
: Le texte français suit. Dear CALLeagues, It was wonderful seeing over 160 of you in Moncton last month for a fantastic conference! I am still thinking about some of the sessions, from Dean Michael Marin's keynote on embedded librarianship and the role that law librarians have in legal education and practice, to sessions on generative AI use in law faculties and law firms, negotiating vendor contracts, and more. A huge thank you to co-chairs Michèle Leblanc and Laura Corscadden and the entire conference planning committee for all of their hard work. We have received wonderful feedback already, though a formal survey will be sent out in the coming weeks. Please do look out for that. As I settle into the president's role, I want to thank Jason Wong for an outstanding year at the helm. Jason's focus on community building and financial sustainability moved us forward in real, tangible ways, and his commitment to inclusion set a standard I hope to maintain. Thank you also to Mary-Jo Petsche for her four years on t[...]