The Federal Trade Commission (“FTC”) has secured a temporary restraining order against a company that allegedly falsely claimed to have self-certified to the EU/U.S. Safe Harbor Program.  One count of the FTC’s complaint claims that the company (named Balls of Kryptonite, LLC) misled consumers by inaccurately representing that it had self-certified to the U.S. Department of Commerce that it was Safe Harbor compliant.  While the FTC has not alleged a substantive violation of the Safe Harbor, this case is significant for two reasons.  First, it marks the first time the FTC has brought an enforcement action with respect to the Safe Harbor Program.  The court order prohibits the defendants from misrepresenting the extent to which they “are members of, adhere to, comply with, are certified by, are endorsed by, or otherwise participate in any privacy, security, or any other compliance program sponsored by any government or third party.”  Second, the FTC acted in concert with the UK Office of Fair Trading after consumers in the UK registered complaints with the FTC using a website established by 25 international consumer protection agencies to facilitate global consumer protection efforts.  This is the first time the FTC has used the U.S. SAFE WEB Act of 2006 to enforce consumer protection regulations against a U.S. company operating exclusively outside the United States.

Popularity: 7% [?]

Related posts:

1. A shot across the bow – FTC Enforcement of US/EU Safe Harbor Program On October 6, 2009, the Federal Trade Commission (“FTC”) announced proposed settlements...
2. German DPAs Require Data Exporters to Verify Safe Harbor Compliance On April 29, 2010, German data protection authorities issued a resolution regarding the...
3. FTC Rejects iSAFE’s COPPA Safe Harbor Application FTC Rejects COPPA Safe Harbor ApplicationThe Commission has rejected the application of...
4. Privacy compliance convergence – HITECH, Safe Harbor and New Mass. Regs. A comparison of compliance programs for HITECH, Safe Harbor and New Mass....
5. Identity theft cases prompt action by Minn. Department of Commerce The Minnesota Department of Commerce is cracking down on identify theft in...
6. UK: Enforcement cases – Data Protection Act (DPA) – ICO 17 December 2009 The Information Commissioner’s Office has found Shropshire Council in breach...