Privacy & Data Security Update: 2018

Citation
Federal Trade Commission, Privacy & Data Security Update: 2018 (2018) (full-text).

Overview
The FTC's privacy and security enforcement actions in 2018 included shutting down revenge porn website MyEx.com, approving a settlement with peer-to-peer payment service Venmo over deceptive privacy settings, approving an expanded settlement with Uber Technologies, Inc. to resolve data security and privacy allegations, and approving a privacy and data security settlement with mobile phone maker BLU Products, Inc. The FTC also obtained a $3 million civil penalty against RealPage, Inc., for violating the Fair Credit Reporting Act of 1970 by failing to ensure the accuracy of tenant screening information.

As part of its strong commitment to protecting children's privacy, the FTC announced separate settlements with electronic toy maker VTech Electronics Limited and online talent site Explore Talent over allegations that they violated the Children's Online Privacy Protection Act. The FTC also is committed to enforcing the EU-U.S. Privacy Shield Framework. In 2018, five U.S. companies settled FTC charges that they misled consumers about their participation in the Framework.

The FTC also issues reports, conducts research, and hosts events to discuss emerging issues in consumer privacy and security. In February 2018, FTC staff released a report examining security updates issued by mobile phone manufacturers, which coincided with the Commission's third annual PrivacyCon event.