FTC Chair Rebecca Slaughter Outlines Data Privacy Enforcement Agenda

Latham & Watkins LLP
Contact

Latham & Watkins LLPSlaughter discusses the FTC’s priorities under the new administration, including ed-tech, health apps, and racial equity.

On February 10, 2021, in her first major speech as acting chair of the Federal Trade Commission (the Commission, or the FTC), Rebecca Slaughter discussed the Commission’s enforcement priorities under the new administration — with a particular focus on deterring problematic data practices.

In her opening remarks at the Future of Privacy Forum, Slaughter stated that she would urge innovation and creativity and the use of all tools available to the Commission in order to bring about the best outcomes for consumers and to deter problematic privacy and data security practices.[i] She also noted that enhanced enforcement around ed-tech, health apps, and racial equity would be priorities for the new administration. In particular, Slaughter mentioned two types of relief that she believes the Commission should focus on going forward: disgorgement and effective consumer notice.

Types of Relief

Disgorgement

The first type of relief that Slaughter referenced is the principle of disgorgement. Slaughter stated that the Commission has often employed the concept of disgorgement of “ill-gotten monetary gains” when consumers pay companies for products or services that involved deceptive marketing. She used Everalbum as an example of how the Commission could employ disgorgement in privacy cases in which companies process data from consumers in deceptive ways.[ii] Slaughter stated that the Commission should require violators “to disgorge not only the ill-gotten data, but also the benefits” derived from such data. In the Everalbum case, Slaughter noted that such benefits included the algorithms that were generated from the data.

Effective Consumer Notice

The second type of relief that Slaughter referenced is effective consumer notice. Slaughter proposed requiring companies to notify consumers if they used consumer information inappropriately or in a way materially different from what was promised, with the hope that “consumers will ‘vote with their feet’” and that such notice will allow them “to better decide whether to recommend the services to others.” Slaughter added that, most critically, effective consumer notice “accords consumers the dignity of knowing what happened,” and added that she will be pushing her staff to include provisions requiring consumer notice in privacy and data security orders.

As an example, Slaughter discussed the Commission’s recent fem-tech case involving the Flo menstruation and fertility app, in which the Commission alleged that Flo shared consumer information with other companies, including Facebook and Google — thereby violating the promises it made to consumers that it would not share their personal information.[iii] The Commission required Flo to notify each of the affected consumers of its false promises.

Use All Tools Available

Besides disgorgement and effective consumer notice, Slaughter also stated that she wanted to ensure that all future cases brought by the Commission would include an analysis of applicable laws in order to ensure that the Commission pleads all possible violations of law. As an example, in a concurring statement (and perhaps a harbinger of what the future holds), Slaughter stated that the Commission should have included unfairness counts.[iv] Future enforcement cases could likely contain all potential pleadings cutting across a panoply of laws under the Commission’s jurisdiction.

Pandemic Considerations Are Priority Number 1: Ed-Tech, Health Apps, Broadband

Slaughter further stated that she and her staff would particularly focus on ed-tech and health apps as they relate to the pandemic.

Ed-Tech

With respect to ed-tech, Slaughter stated that the Commission was conducting an industry-wide study of social media and video streaming platforms. She also noted that the Commission is in the process of reviewing the Children’s Online Privacy Protection Act (COPPA) rule to clarify how COPPA applies in the ed-tech space.

Health Apps

With respect to health apps, Slaughter mentioned that she would like to see more enforcement around companies similar to Flo.

Broadband Privacy Issues

Slaughter further reported that the Commission would issue a report on an industry-wide study of broadband privacy practices.

Racial Equity Is Priority No. 2: Digital Services, Algorithms, Facial Recognition Technologies, and Geolocation Data

Slaughter stated that the Commission would make racial equity a priority issue.

Expensive Digital Services

Slaughter noted that “digital services can target vulnerable communities with unwanted content and that vulnerable communities suffer outsized consequences from data privacy violations.” She stated that the Commission would examine the ways in which vulnerable communities are asked to pay with their data for expensive services that they can ill afford.

Algorithms

Slaughter further mentioned that it is essential that algorithms are not used in discriminatory ways. She stated that her staff would “actively investigate biased and discriminatory algorithms” and that she was interested in the further exploration of the best methods to redress artificial intelligence-generated consumer harms.

Facial Recognition Technologies

Slaughter stated that the Commission will redouble efforts to identify violations in the law concerning the deployment and development of facial recognition technologies.

Geolocation Data

Slaughter relayed concern about the misuse of mobile apps’ use of location data generally, and especially “as it applies to tracking Americans engaged in constitutionally protected speech.”

End notes

[i] Rebecca Kelly Slaughter, Acting Chairwoman, FTC, Remarks at the Future of Privacy Forum: Protecting Consumer Privacy in a Time of Crisis (Feb. 10, 2021).

[ii] Complaint ¶¶ 9, 23, 24, In the Matter of Everalbum, Inc., No. 1923172 (FTC Jan. 11, 2021).

[iii] Comm’r Rohit Chopra & Comm’r Rebecca Kelly Slaughter, FTC, Joint Statement Concurring in Part, Dissenting in Part, In the Matter of Flo Health, Inc., No. 1923133 (Jan. 13, 2021).

[iv] Rebecca Kelly Slaughter, Comm’r, FTC, Concurring Statement, FTC and State of New York v. Vyera Pharmaceuticals, LLC, Phoenixus AG; Martin Shkreli; and Kevin Mulleady, No. 161-0001 (FTC Jan. 27, 2020).

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations.

© Latham & Watkins LLP | Attorney Advertising

Written by:

Latham & Watkins LLP
Contact
more
less

Latham & Watkins LLP on:

Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
- hide
- hide

This website uses cookies to improve user experience, track anonymous site usage, store authorization tokens and permit sharing on social media networks. By continuing to browse this website you accept the use of cookies. Click here to read more about how we use cookies.