October 27, 2021

Volume XI, Number 300

Advertisement
Advertisement

October 26, 2021

Subscribe to Latest Legal News and Analysis

October 25, 2021

Subscribe to Latest Legal News and Analysis
Advertisement

FTC: Collecting and Selling Data Mined from Social Media Sites Covered by FCRA

On June 12, 2012, the Federal Trade Commission (FTC) announced a settlement with Spokeo, Inc., a data broker that compiles and sells detailed information profiles on consumers, in connection with claims that Spokeo violated the Fair Credit Reporting Act (FCRA) and the FTC’s Endorsement Guidelines.  Spokeo will pay $800,000 in civil penalties and has entered into an order prohibiting it from violating certain FCRA provisions and misrepresenting the status of any user or endorser of its product or service.

Notably, this is the FTC’s first case to address the sale of information collected through the internet from social media for use in the employment screening context.  Not only is the FTC watching what social media companies are doing with users’ information, it is paying attention to how data brokers are using information collected through social media sites.  This case, while about the FCRA and Endorsement Guidelines specifically, echoes the enhanced scrutiny for data brokers (and large platform providers and mobile app developers) evident in the FTC’s March 2012 privacy report.

The FCRA was enacted to promote the accuracy, fairness and privacy of information maintained by consumer reporting agencies (sometimes incorrectly referred to as credit reporting agencies).  So-called “consumer reports” are broadly defined in the FCRA as information “bearing on a consumer's credit worthiness, credit standing, credit capacity, character, general reputation, personal characteristics, or mode of living which is used or expected to be used or collected in whole or in part for the purpose of serving as a factor in establishing the consumer’s eligibility for (a) credit or insurance . . .; (b) employment purposes; or (c) any other purpose authorized under [15 U.S.C. § 1681b].”  (Other purposes under § 604 of the FCRA, 15 U.S.C. § 1681b, include determining the consumer’s eligibility for a government license or other benefit, determining capacity to make child support payments, or some other “legitimate business need for the information,” among other similar uses.)

Spokeo collected information about individuals from online and offline sources to create profiles that included contact information, marital status and age range, and in some cases included a person’s hobbies, ethnicity, religion, participation on social networking sites and photos that Spokeo attributed to a particular individual.  Spokeo marketed these profiles to companies in the human resources, background screening and recruiting industries as information to serve as a factor in deciding whether to interview or hire a job candidate.  As such, Spokeo acted as a consumer reporting agency, and the FTC alleged that Spokeo violated the FCRA by (a) failing to ensure the consumer reports it sold were used for legally permissible purposes, (b) failing to ensure that the information it sold was accurate and (c) failing to inform users of Spokeo’s consumer reports of their obligations under the FCRA.

The complaint also alleges that Spokeo violated Section 5 of the FTC Act, which prohibits “unfair or deceptive” trade practices, by directing its employees to post deceptive endorsements of its consumer reports as Spokeo customers (instead of disclosing that the endorsements were posted by Spokeo’s own employees).  The order requires that Spokeo remove (or request removal of) deceptive endorsements of its products, whether on its own website or third-party websites.

For additional information, the FTC’s press release and related documents can be found here.

© 2021 McDermott Will & EmeryNational Law Review, Volume II, Number 179
Advertisement
Advertisement
Advertisement
Advertisement
Advertisement
Advertisement

About this Author

Jennifer S. Geetter, McDermott Will & Emery LLP, Attorney
Partner

Jennifer S. Geetter is a partner in the law firm of McDermott Will & Emery LLP and is based in the Firm's Washington, D.C., office.  She focuses her practice on emerging biotechnology and safety issues, advising hospital, industry, insurance and provider clients on matters relating to research, drug and device development, off-label use, personalized medicine, formulary compliance, privacy and security, electronic health records and data strategy initiatives, patient safety, conflicts of interest, scientific review and research misconduct, internal hospital disciplinary proceedings,...

202 756 8205
Carla A. R. Hine, Antitrust Attorney, McDermott Will Law Firm Washington DC
Partner

Carla A. R. Hine is a partner in the law firm of McDermott Will & Emery LLP and is based in the Firm’s Washington, D.C., office.  She focuses her practice on antitrust and consumer protection regulatory matters.

In her antitrust practice, Carla has significant experience counseling clients on matters relating to mergers and acquisitions, collaborations, and compliance with the Hart-Scott-Rodino (HSR) Act and international merger notification regimes.  She defends mergers and acquisitions before the U.S. antitrust agencies and international competition authorities, and has...

202 756 8095
Advertisement
Advertisement
Advertisement