In this essay, Daniel Solove and Woodrow Hartzog argue that in Section 5 of the Federal Trade Commission (FTC) Act there is a remedy to the seeming lack of consumer control over data held by organizations in the cloud or with other third parties. Certain key cases from the emerging body of FTC enforcement actions on data protection issues can be read together to create a double-edged set of duties—both on the organizations contracting with cloud service providers and on the cloud service providers themselves.
The FTC and Privacy and Security Duties for the Cloud
Related Stories
FTC Cases and Proceedings
This webpage lists all U.S. Federal Trade Commission cases and proceedings and allows filtering by name, date, enforcement type, and more....
Cloud without Borders: Paving the Way for Global Security and Privacy
Privacy. Security. Risk. 2016
Sanjay Jacob, Global Head, Intelligent Cloud, Strategic Industries, Microsoft; Dana Simberkoff, CIPP/US, Chief Compliance and Risk Officer, AvePoint
It’s not a question of if you are going to go to the cloud—it’s a question of what you are going to put in the cloud. H...
Guidance from the Federal Trade Commission — FTC Policy Work
This updating page of documents, published by the U.S. Federal Trade Commission, provides consumers with updates and guidance on FTC policy work related to privacy and data security.
Click to View...
FTC Model Financial Privacy Form (no opt-out)
This form, distributed by the U.S. Federal Trade Commission, is for financial companies to use as a model consumer privacy notice. The form aims to assist financial companies in more transparently disclosing to consumers how and why they collect, share and use certain personal information.
Click to...