From the course: CIPP/US Cert Prep: 2 Private Sector Privacy

Unlock the full course today

Join today to access over 22,700 courses taught by industry experts or purchase this course individually.

FTC security enforcement actions

FTC security enforcement actions

From the course: CIPP/US Cert Prep: 2 Private Sector Privacy

Start my 1-month free trial

FTC security enforcement actions

- The FTC also brings enforcement actions against companies for practices that jeopardize the security of the personal information that they maintain. This authority often arises from the commissions authority, to regulate unfair business practices. Maintaining that failure to protect personal information, is fundamentally unfair to consumers. These enforcement actions may arise after a company suffers a security breach. Or they may be proactive actions taken, mainly after FTC learns of unfair security practices, before a breach occurs. In a landmark security case, the FTC charged Wyndham hotels and resorts, with failing to protect consumers' credit information, resulting in 3 separate security breaches. This case centered around a series of serious security lapses. Including the insecure storage of credit card numbers, without the use of inscription, the use of simple guessable passwords, and a failure to implement…

Contents