FTC Releases 2023 Privacy and Data Security Update

Summary:

The Federal Trade Commission (FTC) has released its Privacy and Data Security Update for 2023, highlighting its work to protect consumer privacy and respond to the evolving ways companies use consumer data. The update details the FTC's actions in key areas, including:

1. Artificial Intelligence: The FTC has brought enforcement actions related to the collection and use of personal information to develop or deploy machine learning algorithms, such as the case against Amazon Alexa for violating the Children's Online Privacy Protection Act (COPPA).
2. Health Privacy: The FTC has taken action to protect the privacy and security of consumers' sensitive health information, including banning BetterHelp from sharing health data with third parties and requiring GoodRx to pay a civil penalty for violating the Health Breach Notification Rule.
3. Children's Privacy: The FTC has worked to protect children's privacy through COPPA enforcement, including cases against Amazon, Epic Games, and Edmodo.
4. Geolocation Data: The FTC has taken action to protect sensitive location data, including suing data broker Kochava Inc. for selling geolocation data that can be used to trace individuals' movements.
5. Data Security: The FTC has targeted companies that fail to implement reasonable data security measures, bringing enforcement actions against Global Tel*Link, Drizly, Chegg, and CafePress.
6. Fair Credit Reporting Act: The FTC has brought cases against companies that fail to ensure the accuracy of tenant screening reports, including an action against Trans Union LLC and a subsidiary.

The FTC has also engaged in rulemaking and policy work to establish baseline standards that protect consumers' privacy.