U.S. flag
          An official website of the United States government
            Here’s how you know
          Here's how you knowDot gov**The .gov means it’s official.**
                
                Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a federal government site.
          Https**The site is secure.**
                
                The **https://** ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

    
          English
                                
                          
        
                españolSecondary Menu
  

        
    
    Report Fraud
                                
                          
        
                Sign Up for Consumer Alerts
                                
                          
        
                Search the Legal Library **
Menu


    close


                  Main Menu Mega
  

        
  
  Show/hide Enforcement menu items
              Enforcement

We enforce federal competition and consumer protection laws that prevent anticompetitive, deceptive, and unfair business practices.

View Enforcement

  Search or browse
the Legal Library

Find legal resources and guidance to understand your business responsibilities and comply with the law.

Browse legal resources

Search small Search
    
          Sections
  

        


      Cases and Proceedings
                              Premerger Notification Program
                              Merger Review
                              Anticompetitive Practices
                              Rulemaking
                              Statutes
                              Competition and Consumer Protection Guidance Documents
                              Warning Letters
                              Consumer Sentinel Network
                              Criminal Liaison Unit
                              FTC Refund Programs
                              Notices of Penalty Offenses
                              Competition Matters Blog
    
          Take action

Report an antitrust violation
File adjudicative documents
Find banned debt collectors
View competition guidance

  Competition Matters Blog
            
          Competition Matters

  Slack, Google Chats, and other Collaborative Messaging Platforms Have Always Been and Will Continue to be Subject to Document Requests

January 26, 2024
    
                      View all Competition Matters Blog posts
      
    Show/hide Policy menu items
              Policy

We work to advance government policies that protect consumers and promote competition.

View Policy

  Search or browse
the Legal Library

Find legal resources and guidance to understand your business responsibilities and comply with the law.

Browse legal resources

Search small Search
    
          Sections
  

        


      Advocacy and Research
                              Advisory Opinions
                              Cooperation Agreements
                              Federal Register Notices
                              Reports
                              Public Comments
                              Studies
                              Testimony
                              Policy Statements
                              InternationalTake action

Find policy statements
Submit a public comment
    
          Feature
        
    
Vision and Priorities

Memo from Chair Lina M. Khan to commission staff and commissioners regarding the vision and priorities for the FTC.

Learn more

  Technology Blog
            
          Technology Blog

  Tick, Tick, Tick. Office of Technology’s Summit on AI

The Office of Technology


January 18, 2024
    
                      View all Technology Blog posts
      
    Show/hide Advice and Guidance menu items
              Advice and Guidance

Learn more about your rights as a consumer and how to spot and avoid scams. Find the resources you need to understand how consumer protection law impacts your business.
    
          Take action

Report fraud
Report identity theft
Register for Do Not Call
Sign up for consumer alerts
Get Business Blog updates
Get your free credit report
Find refund cases
Order bulk publications
    
          Consumer Advice

Shopping and Donating
Credit, Loans, and Debt
Jobs and Making Money
Unwanted Calls, Emails, and Texts
Identity Theft and Online Security
Scams
    
          Business Guidance

Advertising and Marketing
Credit and Finance
Privacy and Security
By Industry
For Small Businesses
Browse Business Guidance Resources
Business Blog

  Servicemembers:
Your tool for financial readiness

Visit militaryconsumer.gov
    
          Get consumer protection basics, plain and simple

Visit consumer.gov
    
          Learn how the FTC protects free enterprise and consumers

Visit Competition Counts
    
          Looking for competition guidance?

Competition Guidance
      
    Show/hide News and Events menu items
              News and Events

  Latest News
            
          Press Release
  FTC Announces Rule Changes Designed to Increase Oversight Effectiveness Over Horseracing Safety and Integrity Authority


January 29, 2024
    
                      View News and Events

  Upcoming Event
            
          Jan30
            National Consumer Protection Week: Outreach and Program Ideas for Your Library

Tuesday, January 30, 2024 | 3:30PM
 - 4:30PM
    
                      View more Events
    
          Sections
  

        


      News
                              Events
                              Features
                              Topics
                              Data and Visualizations
                              Contests
                              Stay ConnectedSign up for the latest news

Follow us on social media
    
          Feature
        
    
FTC Headquarters Building angle
  Open Commission Meetings

Track enforcement and policy developments from the Commission’s open meetings.

  Latest Data Visualization
        
    
Visualization of FTC Refunds to Consumers
  FTC Refunds to Consumers

Explore refund statistics including where refunds were sent and the dollar amounts refunded with this visualization.
      
    Show/hide About the FTC menu items
              About the FTC

Our mission is protecting consumers and competition by preventing anticompetitive, deceptive, and unfair business practices through law enforcement, advocacy, and education without unduly burdening legitimate business activity.

Learn more about the FTC
    
          Sections
  

        


      Mission
                              History
                              Commissioners and Staff
                              Bureaus and Offices
                              Budget and Strategy
                              Office of Inspector General
                              Careers at the FTC
                              Contact
    
          Featured
        
    
Lina M. Khan
  Meet the Chair

Lina M. Khan was sworn in as Chair of the Federal Trade Commission on June 15, 2021.

Chair Lina M. Khan
      
    Search
          Show/hide Search menu items
              Enter Search Term(s):

Looking for legal documents or records? Search the Legal Library instead.
        
        
        English
                                
                          
        
                españolSecondary Menu
  

        
    
    Report Fraud
                                
                          
        
                Sign Up for Consumer Alerts
                                
                          
        
                Search the Legal Library

          
  
          Enforcement
              Show/hide Enforcement menu items
      
                
  
          Cases and Proceedings
      
    
              Premerger Notification Program
      
    
              Merger Review
      
    
              Anticompetitive Practices
      
    
              Rulemaking
      
    
              Statutes
      
    
              Competition and Consumer Protection Guidance Documents
      
    
              Warning Letters
      
    
              Consumer Sentinel Network
      
    
              Criminal Liaison Unit
      
    
              FTC Refund Programs
      
    
              Notices of Penalty Offenses
      
    
              Competition Matters Blog
      
    
              Policy
              Show/hide Policy menu items
      
                
  
          Advocacy and Research
      
    
              Advisory Opinions
      
    
              Cooperation Agreements
      
    
              Federal Register Notices
      
    
              Reports
      
    
              Public Comments
      
    
              Studies
      
    
              Testimony
      
    
              Policy Statements
      
    
              International
      
    
              Advice and Guidance
              Show/hide Advice and Guidance menu items
      
                
  
          Consumer Advice
      
    
              Military Consumer
      
    
              Consumer.gov
      
    
              Business Guidance
      
    
              Competition Guidance
      
    
              Bulk Publications
      
    
              News and Events
              Show/hide News and Events menu items
      
                
  
          News
      
    
              Events
      
    
              Features
      
    
              Topics
      
    
              Data and Visualizations
      
    
              Contests
      
    
              Stay Connected
      
    
              About the FTC
              Show/hide About the FTC menu items
      
                
  
          Mission
      
    
              History
      
    
              Commissioners and Staff
      
    
              Bureaus and Offices
      
    
              Budget and Strategy
      
    
              Office of Inspector General
      
    
              Careers at the FTC
      
    
              ContactEnter Search Term(s):

Looking for legal documents or records? Search the Legal Library instead. Breadcrumb
      Home
                                                                        Policy
                                                                        Advocacy and Research
                                                                        Technology Blog

  Technology Blog

  On FTC’s Twitter Case: Enhancing Security Without Compromising Privacy

By
        DPIP and CTO Staff


May 25, 2022 In a complaint against Twitter announced today, the Federal Trade Commission alleged the company deceptively used Twitter users’ phone numbers and email addresses, which were collected for security purposes, for other purposes from 2014 to 2019. Users provided phone numbers or email addresses to Twitter for a variety of security purposes, such as for two-factor authentication or to unlock an account where Twitter detected suspicious or malicious activity. Twitter would then use this contact information to allow advertisers to target specific groups of Twitter users by matching the telephone numbers and email addresses that Twitter collected to the advertisers’ lists of telephone numbers and email addresses, or to import marketing lists from data brokers for matching purposes. We outline key takeaways of the case below.

Deceptive use of phone and email for targeted advertising instead of just for security

According to the complaint, when Twitter requested phone numbers and email addresses from its users in these contexts, it specifically told them that this information was to help secure their accounts, with no mention of targeted advertising. Twitter’s privacy policy appears to communicate it is using contact information for advertising:

When you use Twitter, even if you’re just looking at Tweets, we receive some personal information from you like the type of device you’re using and your IP address. You can choose to share additional information with us like your email address, phone number, address book contacts, and a public profile. We use this information for things like keeping your account secure and showing you more relevant Tweets, people to follow, events, and ads.

Generic, broad claims buried in a lengthy document do not override more specific, just-in-time statements made to consumers specifically in the context of when they are providing their information – in this case, about the use of contact information for security purposes. If a company says at the point of collection that consumers’ information will be used for a particular purpose, consumers should be able to rely on that promise.[1]

The FTC’s recent action against Cafepress[2] is another example of this. In that case, consumers ordering products online had to submit their email address. As detailed in the complaint, a notice above the email address field stated, “Email address for order notifications and receipt.” The FTC challenged the use of these email addresses for marketing purposes, too, as a deceptive practice.

Mandating multi-factor authentication

A novel feature of our order in Twitter is the requirement that Twitter must allow its users to take advantage of multi-factor authentication choices that do not require providing Twitter a phone number, such as mobile authentication apps or security keys.

This provision reflects the growing importance of multi-factor authentication to protect accounts online. [3] It also helps protect users: in addition to being more protective of privacy, because they do not require providing any personally identifying information, mobile authentication apps and security keys are both more secure than phone-number based multifactor-authentication. Security keys in particular provide a tremendous security benefit to consumers, as they effectively protect against credential phishing attacks that all too often can give an attacker a way into a company’s network, as alleged in Cafepress.

A similar requirement is present in our Cafepress order. In Cafepress, an attacker was able to access sensitive consumer information including security questions and answers used to authenticate accounts – compromising that information for consumers’ accounts at Cafepress and possibly other sites where the consumer may have supplied the same information. The order requires Cafepress to stop using security questions and answers and instead to use secure multi-factor authentication methods.

In actions against companies for law violations relating to privacy or data security, the Commission will continue to look for remedies that make consumers whole and ensure that companies that misused or failed to protect consumers’ data put state-of-the-art measures in place so it does not happen again.

[1] This is a basic tenet of consumer protection law. As stated in the FTC’s “Dot.Com Disclosures” guidance:

[I]t is highly unlikely that consumers will read disclosures buried in ‘terms of use’ and similar lengthy agreements. Even if such agreements may be sufficient for contractual or other purposes, disclosures that are necessary to prevent deception or unfairness should not be relegated to them.  Similarly, simply because consumers click that they ‘agree’ to a term or condition, does not make the disclosure clear and conspicuous.FTC Staff Report, .com Disclosures:  How to Make Effective Disclosures in Digital Advertising at 18 (2013), https://www.ftc.gov/sites/default/files/attachments/press-releases/ftc-staff-revises-online-advertising-disclosure-guidelines/130312dotcomdisclosures.pdf. See also, e.g.,Sears Holdings Management Corporation, FTC Matter No. 082 3099, Docket No. C-4264 (2009), https://www.ftc.gov/legal-library/browse/cases-proceedings/082-3099-c-4264-sears-holdings-management-corporation-corporation-matter.

[2] Residual Pumpkin Entity, LLC, and PlanetArt LLC, FTC Matter No. 1923209 (proposed complaint and consent agreement) (March 15, 2022), https://www.ftc.gov/legal-library/browse/cases-proceedings/1923209-cafepress-matter. Residual Pumpkin Entity and PlanetArt have done business at various times as Cafepress.

[3] The New York Attorney General recently announced that more than 1.1 million online accounts were compromised in cyberattacks at 17 well-known companies through a technique called “credential stuffing,” where hackers try to get into password-secured accounts by various means, including using passwords exposed in previous breaches. Attorney General James stated, “Right now, there are more than 15 billion stolen credentials being circulated across the internet....” See https://ag.ny.gov/press-release/2022/attorney-general-james-alerts-17-companies-credential-stuffing-cyberattacks (and see accompanying guide for tips for businesses to address this issue, https://ag.ny.gov/sites/default/files/businessguide-credentialstuffingattacks.pdf).
                  Subscribe


Subscribe to the Technology Blog updates

  Upcoming FTC Tech Events
            
          Currently we have no upcoming Tech events. Please check back soon.
    
            Pagination
    Current page1
              Page2
                                      Next page
            next ›
                          Last page
            last »

  Additional Information


Office of Technology

  Categories
            
          Accountability (2)
    Authentication (1)
    Big data (1)
    Cryptography (1)
    Data security (7)
    Design (1)
    Human-computer interaction (2)
    MAC address tracking (1)
    Mobile device settings (1)
    Mobile location analytics (1)
    Online advertising (1)
    Passwords (1)
    Patches (1)
    Privacy (8)
    Research (2)

  Archives
            
          January 2024
                  (1)
        	  	  	    	January 2024
                  (1)
        	  	  	    	December 2023
                  (1)
        	  	  	    	December 2023
                  (1)
        	  	  	    	November 2023
                  (1)
        	  	  	    	November 2023
                  (1)
        	  	  	    	September 2023
                  (1)
        	  	  	    	June 2023
                  (1)
        	  	  	    	March 2023
                  (1)
        	  	  	    	March 2023
                  (1)
        	  	  	    	February 2023
                  (1)
        	  	  	    	February 2023
                  (1)
        	  	  	    	May 2022
                  (1)
        	  	  	    	May 2022
                  (1)
        	  	  	    	January 2022
                  (1)
        	  	  	    	October 2021
                  (1)
        	  	  	    	April 2018
                  (1)
        	  	  	    	March 2018
                  (1)
        	  	  	    	January 2018
                  (1)
        	  	  	    	March 2016
                  (1)
    
            Pagination
    Current page1
              Page2
                                      Next page
            Next ›
                          Last page
            Last »View More
  
    
        More from the Technology Blog
            
          Technology Blog

  Tick, Tick, Tick. Office of Technology’s Summit on AI

The Office of Technology


January 18, 2024
    Technology Blog

  AI Companies: Uphold Your Privacy and Confidentiality Commitments

Staff in the Office of Technology


January 9, 2024
    Technology Blog

  Interoperability, Privacy, & Security

Staff in the Office of Technology and the Bureau of Competition


December 21, 2023
    Technology Blog

  Elevating the Voices of Creative Professionals: Report & Quote Book

The Office of Technology


December 18, 2023



  Get Business Blog updates

Enter your email to subscribe to Business Center BlogReturn to top **
Menu
Secondary Menu
  

        
    
    Report Fraud
                                
                          
        
                Sign Up for Consumer Alerts
                                
                          
        
                Search the Legal Library
  
      Main navigation
  

        


      Enforcement
                      
                  Cases and Proceedings
                              Premerger Notification Program
                              Merger Review
                              Anticompetitive Practices
                              Rulemaking
                              Statutes
                              Competition and Consumer Protection Guidance Documents
                              Warning Letters
                              Consumer Sentinel Network
                              Criminal Liaison Unit
                              FTC Refund Programs
                              Notices of Penalty Offenses
                              Competition Matters Blog
                              Policy
                      
                  Advocacy and Research
                              Advisory Opinions
                              Cooperation Agreements
                              Federal Register Notices
                              Reports
                              Public Comments
                              Studies
                              Testimony
                              Policy Statements
                              International
                              Advice and Guidance
                      
                  Consumer Advice
                              Military Consumer
                              Consumer.gov
                              Business Guidance
                              Competition Guidance
                              Bulk Publications
                              News and Events
                      
                  News
                              Events
                              Features
                              Topics
                              Data and Visualizations
                              Contests
                              Stay Connected
                              About the FTC
                      
                  Mission
                              History
                              Commissioners and Staff
                              Bureaus and Offices
                              Budget and Strategy
                              Office of Inspector General
                              Careers at the FTC
                              Contact
  
      Footer
  

        


      Privacy Policy
                              Policy and Notices
                              Accessibility
                              FOIA
                              No FEAR Act
                              Office of Inspector General
                              USA.gov