Data Privacy

ICO Fines Two Companies £225,000 for Nuisance Marketing

The UK's Information Commissioner's Office (ICO) has fined Allay Claims Ltd and ZMLUK Limited a total of £225,000 for sending millions of unsolicited marketing messages. Allay Claims was fined £120,000 for unlawful text messages, and ZMLUK Limited received a £105,000 fine for unlawful marketing emails.

ICO Investigates Grok AI for Non-Consensual Imagery

The UK's Information Commissioner's Office (ICO) has opened a formal investigation into X Internet Unlimited Company and X.AI LLC regarding their Grok AI system. The investigation will assess compliance with data protection laws concerning the potential generation of non-consensual sexual imagery, including of children.

ICO Reprimands GP Surgery for Excessive Medical Data Disclosure

The UK's Information Commissioner's Office (ICO) has reprimanded Staines Health Group for sending 23 years of a terminally ill patient's medical records directly to an insurer, instead of the requested five years to the patient. The ICO cited a lack of written processes and inadequate training as contributing factors.

ICO Fines MediaLab £247,590 for Children's Privacy Failures

The UK's Information Commissioner's Office (ICO) has fined MediaLab, owner of Imgur, £247,590 for unlawfully processing children's personal data. The investigation found MediaLab failed to implement age checks and obtain parental consent, putting children at risk of exposure to harmful content.

FTC v. Kids Project - Petition to Quash Civil Investigative Demand

The Federal Trade Commission (FTC) has filed a petition to quash a Civil Investigative Demand (CID) in the matter of Kids Project (Matter Number P264800). This action relates to an ongoing FTC investigation concerning consumer protection practices.

FTC v. World Professional Association for Transgender Health - Civil Investigative Demand

The FTC has issued a Civil Investigative Demand (CID) to the World Professional Association for Transgender Health (WPATH). WPATH has filed a petition to quash this demand, asserting it is overly broad and unduly burdensome. The FTC is seeking information related to WPATH's standards of care and data collection practices.

FTC and States Sue Cancer Recovery Foundation for Donor Deception

The FTC and 10 states have filed a lawsuit against the Cancer Recovery Foundation International, also known as Women's Cancer Fund, and its operator for allegedly deceiving donors. The charity is accused of collecting over $18 million from 2017 to 2022, with only a small fraction going to support cancer patients and the majority used for fundraisers and the operator.

FTC and States Stop Kars-R-Us.com Deceptive Fundraising Scheme

The FTC and 19 states have stopped Kars-R-Us.com, Inc. and its operators from continuing a deceptive charity fundraising scheme. The operators made false claims to donors, and under a proposed settlement, face restrictions on future fundraising, with one operator permanently banned.

FTC v. XCL Resources Holdings, LLC - Antitrust Enforcement

The FTC has filed a gun jumping case against XCL Resources Holdings, LLC, Verdun Oil Company II LLC, and EP Energy, LLC. The companies will pay a record $5.6 million civil penalty to settle allegations of illegal pre-merger coordination in violation of the Hart-Scott-Rodino Act.

FTC Warns Data Brokers on PADFAA Compliance

The FTC has warned 13 data brokers about their obligations under the Protecting Americans’ Data from Foreign Adversaries Act (PADFAA). The letters remind companies that selling sensitive personal data to foreign adversaries is prohibited and violations could result in civil penalties of up to $53,088 per violation.