: Brussels, 19 March - The EDPB has launched its Coordinated Enforcement Framework (CEF) action for 2026*. Following a year-long coordinated action on the right to erasure in 2025 , the CEF's focus this year will shift to compliance with the obligations of transparency and information under the GDPR . The GDPR ensures that individuals are informed when their data is being processed (under Art. 12, 13 and 14). This right to be informed is a core element of transparency and ensures that individuals have more control over their data. Next steps During 2026, 25 Data Protection Authorities (DPAs) across Europe will take part in this initiative. They will look closely to assess the compliance of controllers with their transparency obligations under the GDPR. Participating DPAs will soon contact controllers from different sectors across Europe, either through enforcement actions or fact-finding exercises. In the latter case, they might also decide to undertake additional follow-up actions if needed. During the second[...]
: FleetCor and its CEO will pay $100 million to settle a Federal Trade Commission administrative action alleging that the company charged its customers, who overwhelmingly are small businesses, undisclosed fees in connection with their use of fuel cards that FleetCor falsely promised businesses would save them money. In a complaint first filed in federal court in 2019 , the FTC alleged that FleetCor Technologies Inc., now known as Corpay Inc., and its CEO Ronald Clarke imposed a broad array of unauthorized fees that its customers never knew about and did not agree to pay, totaling hundreds of millions of dollars and harming tens of thousands of customers. In addition, FleetCor charged late fees to customers who had either paid on time or were prevented by FleetCor from paying on time. FleetCor also misrepresented the gas savings, fraud-control features, and fees associated withits fuel cards. “FleetCor deceived its small business customers by promising fuel savings that never materialized, while unfairly cha[...]
: First INFORM Consumers Act enforcement case filed against online marketplace Temu kkrown September 5, 2025 | 10:00AM First INFORM Consumers Act enforcement case filed against online marketplace Temu Online marketplaces and third party sellers looking for a refresher on the INFORM Consumers Act should look no further than the recent settlement with Whaleco, Inc., which operates the online marketplace Temu. The complaint alleges the company failed to provide online shoppers with required information and tools. This is the first case brought to enforce the INFORM Act. The INFORM Act, which went into effect in 2023, seeks to make online transactions more transparent. Among other things, the law requires online marketplaces to collect, verify, and disclose certain information about high-volume third party sellers. ( Informing Businesses about the INFORM Consumers Act has more on how the law defines terms, what’s required of online marketplaces, and the substantial penalties the FTC and state law enforcers may se[...]
: The Federal Trade Commission is taking action against Illusory Systems Inc. for failing to implement adequate data security measures, leading to a major security breach in which hackers stole $186 million from consumers. Under a proposed order settling the FTC’s allegations, Utah-based Illusory, which does business as Nomad, will be required to implement an information security program to address numerous alleged security failures and to return recovered money to affected consumers. “The FTC Act requires companies to take reasonable security measures,” said Christopher Mufarrige, Director of the FTC’s Bureau of Consumer Protection. “It’s important that companies live up to their security promises to consumers.” In its complaint , the FTC alleged that Nomad prominently touted its security in its advertising, claiming that it offered “security-first” services. The FTC, however, alleged that the company failed to live up to these promises by failing to: use secure coding practices; implement processes for recei[...]
: Brussels, 17 November - The EDPB organises a remote event to collect stakeholders’ input on anonymisation and pseudonymisation on implications of the judgement of the Court of Justice of the European Union (CJEU) in EDPS v Single Resolution Board (SRB) . The event will take place on 12 December 2025 (time to be confirmed). This will be an opportunity to inform and support the EDPB’s ongoing work on these topics as per its work programme 2024-2025 and it reflects the EDPB’s commitment to stakeholder engagement, as outlined in the recent Helsinki statement . Who can participate? Individuals representing sector associations, organisations or NGOs and individual companies, law firms or academics are invited to express their interest to participate in this event (one participant per organisation). The EDPB encourages all organisations interested in this matter to delegate a representative with technical knowledge of these topics. As a general rule, participants will be registered on a first-come first-served b[...]
: Alexander Mashinsky, the former CEO of cryptocurrency platform Celsius Network Inc. (Celsius), and his business partners, Shlomi Daniel Leon and Hanoch “Nuke” Goldstein, will pay a total of $16.5 million to resolve the Federal Trade Commission’s charges that they deceived users by falsely promising that deposits made to their cryptocurrency platform would be safe and always available. Mashinsky and Leon have also agreed to a ban on marketing or selling products or services that can be used to deposit, exchange, invest or withdraw assets. Similarly, Goldstein has agreed to a ban on marketing or selling retail products or services that can be used to buy, sell, deposit, withdraw, distribute or trade cryptocurrency. In its July 2023 complaint , the FTC alleged that Celsius and its co-founders promised consumers that Celsius was “safer” than a bank or other traditional financial institutions and misrepresented that their deposits were safe because Celsius earned profits at “no risk” to consumers by making secur[...]
: i-Dressup and a data security mess-up lfair April 24, 2019 | 3:08PM i-Dressup and a data security mess-up By Lesley Fair Kids love to play dress-up, but parents wouldn’t want them rummaging through the attic or climbing to the top shelf of the wardrobe without permission and proper supervision. The i-Dressup.com website offered users – including children – a virtual way to play dress-up and design clothes without those potential dangers. But according to an FTC complaint, Unixiz, Inc. , the company behind i-Dressup, violated the Children’s Online Privacy Protection Act in ways that created different kinds of risks. COPPA puts two separate sets of protections in place to help keep parents in control of personal information collected from their kids online. First, COPPA-covered companies must clearly disclose their information policies and get parental consent before collecting personal information from children under 13. Second, companies must provide reasonable and appropriate security for the data they coll[...]
: Brussels, 18 February - The European Data Protection Board (EDPB) has adopted a report on its Coordinated Enforcement Framework (CEF) action on the right to be forgotten (Art.17 GDPR) . The Board selected this topic as it is one of the most frequently exercised GDPR rights and one about which DPAs frequently receive complaints from individuals. The main objectives of this coordinated action are to ensure that the right to erasure is effectively exercised by individuals in Europe and understand how controllers comply with this right in practice. In addition, the EDPB identified good practices and the most important related challenges, with the aim of providing further guidance on this topic. Throughout 2025, 32 DPAs across Europe took part in this initiative. More specifically, 9 DPAs have initiated new formal investigations or have continued ongoing ones, and 23 DPAs carried out a fact-finding exercise. A total of 764 controllers across Europe responded to the action, ranging from small and medium-sized[...]
: A Ninth Circuit panel has partially revived (Law360 subscription required) a lawsuit alleging that FDA and USDA nutrient content claim regulations violate First Amendment rights by preventing the inclusion of certain information about fermentable oligosaccharides, disaccharides, monosaccharides, and poloyols (FODMAPs) on food labels. The lawsuit was initially filed against FDA, USDA, and USDA's Food Safety Inspection Service (FSIS) in March 2023 after one plaintiff submitted a label to FSIS for approval. FSIS denied the approval, telling the company that it must “remove all references to digestible, gut loving, and fodmap.” According to the plaintiff, FDA had never raised concerns about the claims on labels of FDA-regulated foods. According to the Ninth Circuit, FSIS told the company that it discussed the proposed label with FDA, and FDA agreed that the FODMAP claims were impermissible nutrient content claims. The company modified the label, then filed the lawsuit along with a consumer plaintiff. The plainti[...]
: Michel Van Bellinghen elected BEREC Chair 2028 yannick.stephan Thu, 01/10/2026 - 08:59 Latest News At its plenary meeting on 1 October 2026, the Board of Regulators elected Michel Van Bellinghen , Chair of the BIPT Council (Belgium), as the BEREC Chair for 2028. In the year preceding the chairmanship, he will join the Mini-Board and work closely with the incoming Chair, Alejandra de Iturriaga Gandini ( CNMC , Spain), helping to ensure a smooth handover of responsibilities and continuity in BEREC’s work. This will be the second time Michel Van Bellinghen serves as BEREC Chair. BEREC leadership in 2027 BEREC’s leadership is centred on the Chair, supported by the Vice-Chairs. The Mini-Board, composed of the Chair, the Vice-Chairs and participants without voting rights, provides support for the Chair in carrying out their leadership responsibilities. During the plenary meeting, the Board of Regulators also elected the Vice-Chairs for 2027. Klaus Steinmaurer ( RTR , Austria) and Karol Krzywicki ( UKE , Poland) wi[...]
: We all have a few tricks up our sleeve when it comes to performing legal research. We sometimes share them with clients. And sometimes, we like to use those tricks to hunt down seemingly impossible to find material and wow them. Because nothing is “impossible” for law librarians. The CALL blog has started a new regular series of research tips and tricks. Please share your favourite or coolest strategies with Michel-Adrien Sheppard to have them published on the CALL blog. Nous avons tous nos trucs favoris quand il s'agit de faire de la recherche juridique. Parfois, nous les partageons avec nos clients. Et parfois, nous aimons les épater en utilisant ces trucs et astuces pour mettre la main sur des informations apparemment impossibles à trouver. Car rien n’est « impossible » pour des bibliothécaires de droit. Le blogue de l'ACBD a lancé une nouvelle série sur les trucs et astuces de recherche. SVP partagez vos stratégies les plus intéressantes ou les plus « cool » avec Michel-Adrien Sheppard afin de les fair[...]
: A clothes look at the RN database: Q&A with FTC staff lfair October 5, 2017 | 11:18AM A clothes look at the RN database: Q&A with FTC staff By Lesley Fair It’s not much bigger than a postage stamp, but the label on many textile, wool, and fur products provides important information, including fiber content, country of origin, and a company name or Registered Identification Number (RN). The FTC administers the RN system and industry members will want to check out recent upgrades to the RN website . With RNs and labels on our mind, we asked some common RN-related questions to attorney Josh Millard, whom we’d label as one of the FTC’s go-to people on the subject. First things first. What’s an RN? JOSH: A Registered Identification Number (RN) is a numerical designation – the prefix RN followed by a set of digits – that identifies the company responsible for marketing, distributing or otherwise handling a product covered by the Textile, Wool, and Fur Acts. Because some labels are small and some company names a[...]
: Keep FCRA in the foreground when the subject is background screening chundycz April 9, 2014 | 12:13AM Keep FCRA in the foreground when the subject is background screening By Lesley Fair When the talk turns to Big Data, part of the conversation is about all the public information available about people's lives – and how companies market it to prospective employers, landlords, etc. Two cases just announced by the FTC serve as a cautionary reminder to members of the industry that what they do may be subject to the long-standing consumer protections of the Fair Credit Reporting Act (FCRA) . InfoTrack, an Illinois company, and San Diego-based Instant Checkmate will be paying civil penalties to settle FTC lawsuits that they violated the FCRA. Is it time for an FCRA refresher at your business? Instant Checkmate marketed its reports as a way for prospective employers and landlords to investigate applicants. For example, the company advertised that one of the “GOOD REASONS to get instant criminal checks on anyo[...]
: Amazon will pay $2.25 million in civil penalties to settle Federal Trade Commission allegations that the online retail giant knowingly violated the Fair Credit Reporting Act (FCRA) by refusing to provide transaction records to consumers whose personal information was used by identity thieves to commit fraud. The complaint , filed by the Department of Justice upon notification and referral from the FTC, alleged that in numerous instances, Amazon.com Inc. failed to comply with Section 609(e) of the FCRA, which requires companies to, within 30 days of a consumer’s request, provide victims of identity theft with application and business transaction records about fraudulent transactions made in their names. According to the complaint, Amazon had no written policy to respond to Section 609(e) requests until early 2025, after it learned of the FTC’s investigation, despite prior outreach from FTC staff advising the company to review its compliance with Section 609(e). “Amazon often put identity theft victims through[...]
: FTC challenges influencer campaign for Warner Bros.’ Shadow of Mordor game lfair July 11, 2016 | 11:17AM FTC challenges influencer campaign for Warner Bros.’ Shadow of Mordor game By Lesley Fair In the popular video game Shadow of Mordor , players don’t just randomly slash, hack, and pillage. They battle specific opponents through a feature known as the Nemesis System. In the FTC’s lawsuit against Warner Bros. Home Entertainment , truth in advertising had a nemesis: paid pitches for Shadow of Mordor that Warner Bros. deceptively claimed were independent reviews. And read on for a startlingly candid statement by one of those influencers. To help launch Shadow of Mordor , Warner Bros. brought a social media company on board to coordinate a YouTube influencer campaign. One strategy was to hire influential gamers to post videos promoting Shadow of Mordor – videos that ultimately yielded more than 5.5 million YouTube views. In addition to free game access, Warner Bros. paid the influencers cash – ranging from hun[...]
: New data from the Federal Trade Commission reveal that people reported losing a staggering $3.5 billion to imposter scams in 2025, with reported losses increasing nearly three times since 2020. FTC data also show that people reported imposter scams more than any other fraud category in 2025—nearly one in three fraud reports were about imposter scams. These scams lured consumers through text, phone, email, social media, search engine results and other means. Some of the costliest impersonation scams start with a fake security alert, often from a bank. People are convinced to move money to “protect” it, with their losses often limited only by their available funds. Last year, people reported losing nearly $1 billion to business impersonators with the highest reported losses to bank impersonators—and about $920 million to government impersonators, up from $866 million and $789 million respectively in 2024. The FTC has seen a striking increase in reported fraud losses to all types of fraud—about $16 billion was [...]
: Practice Fusion case suggests 6 health privacy pointers lfair June 8, 2016 | 9:01AM Practice Fusion case suggests 6 health privacy pointers By Lesley Fair Combine two of the most talked-about consumer protection topics – health privacy and consumer-generated online content – and what do you get? A proposed FTC settlement with Practice Fusion, the largest cloud-based electronic health records company in the country, and six compliance tips for others in the industry. One of San Francisco-based Practice Fusion’s primary products is an electronic records system for outpatient providers. In 2009, the company launched “Patient Fusion,” an online portal where patients whose providers were already using Practice Fusion could view or download their health information or transmit it to another provider. Patient Fusion also let patients send and receive secure messages from their providers. Fast forward several years and the company decided to expand Patient Fusion to include a public directory where current and prosp[...]
: Fighting Coronavirus scams: Taking stock chundycz May 8, 2020 | 9:01AM Fighting Coronavirus scams: Taking stock By Andrew Smith, Director, FTC Bureau of Consumer Protection Since the beginning of the COVID-19 crisis, the FTC has released dozens of warning letters against people trying to make an illegal buck off the Coronavirus. More than a month in, it seems like a good time to look back at what’s happened. If you follow this blog, you’ll know these have been busy weeks – with advice about spotting the many scams we’re all facing, news of the warning letters sent on a wide range of scams, and some enforcement actions filed. You might wonder: Why send letters? Why not just sue the !*$@&#? Fair question. But the letters are working. And, given the scope of the scams out there right now, we want to get the best and fastest results we can with the most efficient tool we have. Right now, for these Coronavirus-related issues, that’s warning letters. In general, here’s how it goes: We spot someone advertising some[...]
: The Federal Trade Commission’s initial findings from its surveillance pricing market study revealed that details like a person’s precise location or browser history can be frequently used to target individual consumers with different prices for the same goods and services. The staff perspective is based on an examination of documents obtained by FTC staff’s 6(b) orders sent to several companies in July aiming to better understand the shadowy market that third-party intermediaries use to set individualized prices for products and services based on consumers’ characteristics and behaviors, like location, demographics, browsing patterns and shopping history. Staff found that consumer behaviors ranging from mouse movements on a webpage to the type of products that consumers leave unpurchased in an online shopping cart can be tracked and used by retailers to tailor consumer pricing. “Initial staff findings show that retailers frequently use people’s personal information to set targeted, tailored prices for goods[...]
: Public consultation on the draft BEREC Report on Virtual Worlds and Web 4.0 yannick.stephan Tue, 17/03/2026 - 09:26 Breadcrumbs Public Consultations & Calls for Inputs Deadline: Monday, 20 April 2026 (17:00 CEST) During the 66th BEREC plenary meeting (12-13 March 2026), the Board of Regulators approved the Draft BEREC Report on Virtual Worlds and Web 4.0 (BoR (26) 39) for public consultation. The report in a nutshell Virtual worlds (VW) and web 4.0 are at the basis of a transition to the 4th generation of internet based services, leading toward industry 4.0 and smart society. This shift is driven by artificial intelligence (AI) integration in networks and services. Hence, web 4.0 and immersive services are meant to have a significant economic and social impact by transforming the way in which industrial production evolves and automates its processes. At the same time, they transform the fruition of online content and applications by users. This draft BEREC Report provides a fully-fledged analysis. The first [...]
: Company to pay $22 million for offering "free" credit scores that turned out to be not so free wfg-adm109 November 19, 2014 | 11:12AM Company to pay $22 million for offering "free" credit scores that turned out to be not so free By Lesley Fair We’ve brought law enforcement actions – dozens of ‘em. We’ve held workshops, issued reports, and sent warning letters. If it takes sky writing, tap dancing, and a float in a Thanksgiving Day parade, we’ll do that, too. But here’s what’s not going to happen. The FTC is not giving up until businesses get the message that: 1) Free means free; and 2) Key terms and conditions have to be clearly and conspicuously disclosed. A $22 million settlement announced by the FTC and the AGs of Illinois and Ohio with a national credit monitoring service advertising so-called “free” credit scores emphasizes that point. Another note for practitioners: It's the FTC's third case alleging violations of ROSCA . One Technologies and related outfits marketed their credit monitoring programs, M[...]