Recent FTC Order Has Implications for Executive Liability and Corporate Data Minimization Practices

On October 31, 2022, the Federal Trade Commission (FTC) announced it has taken action against education technology provider Chegg Inc. (“Chegg”) for its “careless” cybersecurity practices that exposed sensitive personal information of millions of its customers and employees.  This action highlights the FTC’s continued efforts to aggressively protect consumer personal data. The FTC’s complaint alleges […]

The post FTC Takes Action Against Chegg For ‘Careless’ Security Practices Resulting in Four Breaches appeared first on Alston & Bird Privacy, Cyber & Data Strategy Blog.

Less than a month ago, a critical vulnerability was identified in the ubiquitous, open source Log4j tool prompting swift guidance from Cybersecurity and Infrastructure Security Agency (CISA) and other security practitioners.  Now, the Federal Trade Commission (FTC) has warned companies that it “intends to use its full legal authority” against any company that fails to […]

The post FTC Releases Warning to Companies that Fail to Mitigate Log4j Vulnerability appeared first on Alston & Bird Privacy, Cyber & Data Strategy Blog.