Share on LinkedInShare on LinkedIn

ARTICLE · 05 MARCH 2018

Key Lessons From Federal Trade Commission's 2017 Report On Privacy And Data Security

Miller Thomson
Miller Thomson
Contributor

Miller Thomson

Miller Thomson LLP ("Miller Thomson") is a national business law firm with approximately 500...

View firm profile
Explore more from Miller Thomson

Below is a summary of some notable enforcement actions taken by the FTC in the areas of privacy, data security and international enforcement.

GlobalPrivacy
Dan Doliner
Dan Doliner
Imran Ahmad
Imran Ahmad
Marco Maduri
Marco Maduri
Author LinkedIn connections

On January 18, 2018, the U.S. Federal Trade Commission (the "FTC") released its annual report on Privacy & Data Security for 2017 (the "Report"). The Report reviews the FTC's privacy and data security related activities in 2017, including in the areas of enforcement, policy and business guidance.

The enforcement section of the Report provides helpful insights into the types of privacy issues that are priorities for the FTC, both within the U.S. and globally. Below is a summary of some notable enforcement actions taken by the FTC in the areas of privacy, data security and international enforcement.

Privacy

Uber Technologies, Inc.

Following reports alleging that Uber employees were improperly accessing consumer data, Uber issued a statement claiming that it had a "strict policy prohibiting" employees from accessing rider and driver data – except for a limited set of legitimate business purposes – and that employee access would be closely monitored on an ongoing

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Related Comparative Guides

See more popular content from

Article

OPC Issues New PIPEDA Guidance On Assessing Third-Party Service Providers

Canada's privacy regulator has released new draft guidance establishing comprehensive due diligence standards for organizations evaluating third-party service providers under PIPEDA. The framework introduces eleven best practices covering everything from data flow mapping and AI training data sourcing to vendor lock-in risks and ongoing monitoring obligations, signaling heightened expectations for privacy accountability in vendor relationships.
CanadaPrivacy
Bennett Jones LLP
Bennett Jones LLP
Article

Quebec’s New Truck Licence Transfer Rules: What Ontario Carriers Need To Do Now

Ontario commercial truck drivers with less than two years of heavy-truck experience must now pass a practical road test administered by Quebec's SAAQ before transferring their licence to operate heavy vehicles in the province. This new requirement follows fatal collisions and an Ontario Auditor General audit that exposed significant gaps in training standards and provider oversight. Carriers operating across the border need to factor these requirements into workforce planning, recruitment timelines, and dis
CanadaTransport
Miller Thomson
Miller Thomson
Article

Canadian Income Tax Source Deductions And Payroll Taxes: What Every Foreign Employer Needs To Know

Foreign companies hiring Canadian employees or allowing remote work from Canada face immediate payroll obligations that begin the moment employment duties are performed on Canadian soil. Understanding income tax source deductions, CPP and EI premiums, provincial payroll taxes, and director liability rules is essential for compliance, regardless of whether the employer maintains a physical Canadian presence.
CanadaTax
Miller Thomson
Miller Thomson
Article

Quebec’s Bill 24: New Consent Requirements For AI Generated Advertising And The Legal Risks Business Cannot Afford To Ignore

Quebec's new Bill 24 prohibits businesses from using a person's identity or image in consumer advertising without consent, creating significant compliance obligations for companies using AI-generated content, synthetic voices, and digitally altered spokespersons. The legislation introduces broad enforcement powers and extends liability beyond content creators to platforms that distribute or facilitate unauthorized representations.
CanadaConsumer Protection
Miller Thomson
Miller Thomson
Article

Could The Old Ontario Construction Lien Act Still Apply To Your Project? The Court Of Appeal Weighs In

A 2026 Ontario Court of Appeal decision reveals that construction contracts signed years after legislative reforms may still be governed by the old Construction Lien Act if the procurement process began before July 1, 2018. The ruling demonstrates how early project proposals and negotiations can determine which statutory regime applies, regardless of when the final contract was executed or where the project was ultimately built.
CanadaReal Estate and Construction
Miller Thomson
Miller Thomson
Article

Consultation du Canada sur la transparence en matière d’IA : ce que les entreprises doivent savoir avant le 23 septembre

Canadian organizations developing, acquiring, deploying or using AI have until September 23, 2026 to contribute to shaping the federal government's approach to AI transparency through a public consultation. Innovation, Science and Economic Development Canada is seeking input on five key areas that could lead to new disclosure obligations, incident reporting requirements, and AI agent tracking mechanisms.
CanadaStrategy
Miller Thomson
Miller Thomson