InfoBytes Blog
Filter
Subscribe to our InfoBytes Blog weekly newsletter and other publications for news affecting the financial services industry.
FTC approves final expanded settlement with global ride-sharing company over data breaches
On October 26, the FTC announced its final approval of an expanded settlement with a global ride-sharing company over allegations that the company violated the FTC Act by deceiving consumers regarding the company’s privacy and data practices. Specifically, the company allegedly failed to closely monitor and audit its employees’ internal access to consumer and driver data. Furthermore, the company represented to consumers and drivers that personal information stored in its databases were secure, but, according to the FTC, the company failed to implement reasonable measures to prevent unauthorized access to consumers and driver data maintained by the ride-sharing company’s third-party cloud service provider. In April, the FTC announced it would be expanding the original settlement from August 2017 (previously covered by InfoBytes here), which covered a 2014 data breach, because it was discovered the company failed to disclose a subsequent data breach that occurred in 2016 for more than a year, despite the on-going FTC investigation of the 2014 data breach.
The expanded final settlement subjects the company to civil penalties if it fails to notify the FTC of future incidents involving unauthorized access to data. The settlement also, among other things, requires the company to implement a comprehensive privacy program, including biennial third-party privacy assessments for 20 years.
FTC reaches settlements with student debt relief operators
On September 28, as part of Operation Game of Loans, a coordinated effort between the FTC and state law enforcement, the FTC announced settlements with several individuals and their associated companies (defendants), accused of violating the FTC Act and the Telemarketing Sales Rule when marketing and selling student debt relief services. According to the FTC, the defendants, among other claims: allegedly (i) misrepresented to consumers that they were affiliated with the Department of Education or a borrower’s loan servicer; (ii) claimed that consumers who paid an up-front fee—as much as $1,000 according to the FTC’s complaint—would qualify for or be approved to receive permanently reduced monthly payments or have their student loans forgiven or discharged; and (iii) engaged in deceptive advertising practices through social media, falsely claiming they could qualify, establish eligibility for, approve, or enroll consumers in loan forgiveness programs.
Under the terms of the settlements, the defendants are permanently banned from advertising, marketing, promoting, offering for sale, or selling any type of debt relief products or services—or from assisting others to do the same. The defendants also are prohibited from making misrepresentations related to financial products and services. Combined, the settlements total more than $19 million in monetary judgments, all of which have been partially suspended due to the defendants’ inability to pay the entire amount of their respective judgments. The more than $5 million in unsuspended amounts may be used for equitable relief, including consumer redress.
FTC announces settlements with website operators over the sale of fake documents allegedly used for fraud and identity theft
On September 18, the FTC announced three proposed settlements with the operators of websites who allegedly violated the FTC Act’s prohibition against unfair practices by selling fake financial documents used to facilitate identity theft and other frauds, including loan and tax fraud. As previously covered in InfoBytes, identity theft was the second largest category of consumer complaints reported in 2017 according to the FTC. The FTC brought charges against the first defendant, alleging the defendant engaged in the sale of fake pay stubs, bank statements, and profit-and-loss statements, as well as providing a product that allowed customers to edit existing (and authentic) bank statements. The second defendant’s charges include the alleged sale of fake pay stubs, auto insurance cards, and utility and cable bills, while the allegations against the third defendant also include the sale of fake tax forms, bank statements, and verifications of employment. While the defendants’ websites claimed that the fake documents were sold for “‘novelty’ and ‘entertainment’ purposes,” the FTC asserts that the defendants “failed to clearly and prominently mark such documents as being for such purposes and did not state on the documents themselves that they were fake.”
Under the terms of the proposed settlement agreements (see here, here, and here), monetary judgments are imposed against the defendants, who also are permanently prohibited from advertising, marketing, or selling similar fake documents.
FTC settles with debt collection operators for alleged fraudulent collections
On September 7, the FTC announced a series of settlements with the operators of a Georgia-based debt collection business for allegedly violating the FTC Act by making false, or misleading claims and threats during debt collection. As previously covered by InfoBytes, in November 2017, the FTC filed a complaint alleging that the defendants threatened legal action, garnishment, and imprisonment if purported debts were not paid, and in other instances, attempted to collect debts after consumers provided proof that the debt was paid off. Each settlement order (available here, here, and here) imposes a $3.4 million penalty against the defendants, which, after surrendering certain assets, will be partially suspended due to the inability to pay. The settlement orders ban the defendants from the business of debt collection, and prohibit the defendants from (i) misrepresenting information related to financial products and services, and (ii) disclosing, using, or benefitting from the consumer information obtained through the course of the debt collection activities.
FTC seeks comments on possible adjustments to privacy and data security rulemaking authority
On August 6, the FTC published a request for comments in the Federal Register—in advance of a series of 15 to 20 public hearings scheduled to start this September—on whether the agency should make adjustments to competition and consumer protection law, enforcement priorities, and policy in light of evolving technologies and market developments. The hearings will cover a range of consumer-related issues, including the agency’s “remedial authority to deter unfair and deceptive conduct in privacy and data security matters” and the “interpretation and harmonization of state and federal statutes and regulations that prohibit [such conduct].” According to testimony presented by FTC Chairman Joseph Simons at a July 18 House Subcommittee on Digital Commerce and Consumer Protection hearing, there exists a need for expanded rulemaking and civil penalty authority. Specifically, Simons discussed Section 5 of the FTC Act, which he stated is too limited to address all of the privacy and security concerns in the marketplace and does not provide for civil penalties. Comments on the hearing topics must be received by August 20.
FTC announces charges against auto dealerships for falsifying consumer information on auto financing documents
On August 1, the FTC announced charges against a group of four auto dealers (defendants) with locations in Arizona and New Mexico near the Navajo Nation’s border alleging, among other things, that the defendants advertised misleading discounts and incentives through their vehicle advertisements, and falsely inflated consumers’ income and down payment information on certain financing applications. The charges brought against the defendants allege violations of the FTC Act, the Truth in Lending Act, and the Consumer Leasing Act. According to the complaint, by allegedly falsifying the customers’ income and down payments, the defendants “inaccurately made consumers appear more creditworthy” on the false financing applications. Moreover, the FTC claims the defendants often prevented consumers from reviewing the falsified information provide in the financing applications prior to signing. As a result, credit was extended to consumers—many of whom are members of the Navajo Nation—who then subsequently “defaulted at a higher rate than properly qualified buyers.” Furthermore, the complaint asserts that the defendants’ deceptive advertising practices concealed the true nature and terms of the financing or leasing offers, and were in violation of federal law for failing to disclose the required terms. The complaint seeks, among other remedies, a permanent injunction to prevent future violations, restitution, and disgorgement.
FTC testifies before House subcommittees about combating consumer fraud
On July 26, the Director of the FTC’s Bureau of Consumer Protection, Andrew Smith, testified before subcommittees of the U.S. House Committee on Oversight and Government Reform regarding the FTC’s program to combat consumer fraud. The prepared testimony discusses the FTC’s anti-fraud program and highlights the agency’s enforcement actions against illicit companies that pose as government agents, such as the IRS, to convince consumers and small businesses to send them money. The FTC touts the steps taken to spur development of technological solutions to unlawful robocalls, including call-blocking and call-filtering products. The testimony also focuses on the FTC’s efforts to curb payment processors from assisting fraudulent actors in violation of the FTC Act. The FTC notes that the Commission has brought 25 actions against payment processors that failed to comply with requirements to ensure their systems were not being used to process fraudulent merchant transactions. The FTC emphasized that while the “overwhelming majority” of payment processors abide by the law, when certain processors do not, they cause “significant economic harm to consumers and legitimate businesses.”
FTC and New York Attorney General reach deal with debt collection firm
On July 20, the U.S. District Court for the Western District of New York issued a judgment to resolve a suit brought by the FTC and the New York Attorney General against a debt collection firm and an affiliated officer (defendants) accused of allegedly engaging in deceptive and abusive practices, including unlawfully threatening to arrest consumers if debts were not paid. (See previous InfoBytes coverage here.) Under the stipulated final order for permanent injunction and settlement of claims pursuant to the FTC Act and the Fair Debt Collection Practices Act, the defendants—who have not admitted to the allegations—are held jointly and severally liable for paying the more than $22.5 million under a suspended judgment should it ever be determined that the financial disclosures provided to the state and the FTC were not completely truthful, accurate, or complete. The defendants are also banned from the debt collection industry and required to file compliance reports with the FTC. The judgment further authorizes the receiver to liquidate the debt collection firm’s assets.
District Court agrees with FTC, enters $5 million judgment against credit monitoring scheme
On June 26, the U.S. District Court for the Northern District of Illinois granted the FTC’s motion for summary judgment, concluding that no reasonable jury would find that the defendants’ scheme of using false rental property ads to solicit consumer enrollment in credit monitoring services without their knowledge did not involve unfair or deceptive practices. The FTC argued that the defendants’ scheme, which used the promise of a free credit report to enroll the consumers into a monthly credit monitoring program, violated the FTC Act’s ban on deceptive practices. The court agreed, holding that the ad campaign was “rife with material misrepresentations that were likely to deceive a reasonable consumer.” Additionally the court agreed with the FTC that the defendants’ website was materially misrepresentative because it did not give “the net impression that consumers were enrolling in a monthly credit monitoring service” for $29.94 a month, as opposed to defendants’ claim that consumers were obtaining a free credit report.
The court entered a judgment ordering the defendants to pay over $5 million in equitable monetary relief to the FTC and prohibiting defendants from, among other things, charging consumers for any credit monitoring services and disclosing or using any collected consumer information. The defendants must also submit to compliance reporting and monitoring by the FTC.
FTC and New York Attorney General announce action against phantom debt operation
On June 27, the FTC and the New York Attorney General’s Office announced charges against two New York-based phantom debt operations and their principals. The complaint alleges they ran a deceptive and abusive debt collection scheme involving the marketing and selling of fictitious loan debt portfolios and collecting on debts consumers did not owe. The charges brought against the operations allege violations of the FTC Act, the Fair Debt Collection Practices Act, and New York state law. According to the complaint, the debt broker knowingly purchased fabricated debt from a phantom debt collection operation previously charged by the FTC and the Illinois Attorney General in a separate action for selling fabricated debt. (As previously covered by InfoBytes, the Illinois-based operation was banned from the debt collection business and prohibited from selling debt portfolios.) The debt broker then engaged a debt collection agency and its owner to collect on the fabricated debt using illegal collection tactics, while continuing to purchase debts and place them for collection despite having knowledge that consumers disputed the debts. The complaint seeks, among other things, injunctive relief, restitution, and disgorgement.