Case Studies: Recent FTC Enforcement Actions - High-Profile
Cases of Privacy Violation: Uber, Emp Media, Lenovo, Vizio, VTech,
LabMD
Uber Technologies
The scenario: In August 2018, the FTC announced an expanded
settlement with Uber Technologies for its alleged failure to
reasonably secure sensitive data in the cloud, resulting in a data
breach of 600,000 names and driver's license numbers, 22
million names and phone numbers, and more than 25 million names and
email addresses.
The settlement: The expanded settlement is a
result of Uber's failure to disclose a significant data breach
that occurred in 2016 while the FTC was conducting its
investigation that led to the original settlement. The revised
proposed order includes provisions requiring Uber to disclose any
future consumer data breaches, submit all reports for third-party
audits of Uber's privacy policy and retain reports on
unauthorized access to consumer data.2
