FTC Finalizes Twitter Settlement

The Federal Trade Commission (FTC) announced on Friday that it has finalized a settlement with Twitter over assertions that the popular social networking site failed to safeguard consumers' privacy and personal information. The FTC’s initial complaint was filed after Twitter experienced two high-profile hacker attacks in January and April of 2009. According to David Vladeck, Director of the FTC's Bureau of Consumer Protection, "When a company promises consumers that their personal information is secure, it must live up to that promise." 

The settlement, which was originally proposed in June of 2010, places a 20 year ban on Twitter from “misleading consumers about the extent to which it protects the security, privacy, and confidentiality of nonpublic consumer information.”  In addition, Twitter must implement a comprehensive security program with evaluation by an independent auditor every other year for the next 10 years. Each violation of such an order may result in a civil penalty of up to $16,000.

Click here to read the FTC’s release on the initial settlement with details on the infractions : Twitter Settles Charges that it Failed to Protect Consumers’ Personal Information; Company Will Establish Independently Audited Information Security Program. 

Click here to read the FTC’s release on the final settlement: FTC Accepts Final Settlement with Twitter for Failure to Safeguard Personal Information.