Protecting the Security of Your Information Mary Beth Richards Federal Trade Commission May 7, 2008

F EDERAL T RADE C OMMISSION PROTECTING AMERICA’S CONSUMERS About the FTC Protects consumers through jurisdiction over both competition and consumer protection Protects consumers through jurisdiction over both competition and consumer protection Main statute Section 5 of the FTC Act Main statute Section 5 of the FTC Act Other statutes Other statutes Fair Credit Reporting Act Fair Credit Reporting Act Children's Online Privacy Protection Act Children's Online Privacy Protection Act CAN-SPAM CAN-SPAM

F EDERAL T RADE C OMMISSION PROTECTING AMERICA’S CONSUMERS Marketing Practices Privacy & Identity Protection Financial Practices Planning & Information Enforcement Advertising Practices Bureau of Consumer Protection Consumer & Business Education

F EDERAL T RADE C OMMISSION PROTECTING AMERICA’S CONSUMERS The FTC Uses Multiple Tools Enforcement Enforcement Policy Development Policy Development Education Education

F EDERAL T RADE C OMMISSION PROTECTING AMERICA’S CONSUMERS Policy Development

F EDERAL T RADE C OMMISSION PROTECTING AMERICA’S CONSUMERSEducation Websites Websites OnGuardOnline.gov OnGuardOnline.gov ftc.gov/idtheft ftc.gov/idtheft Print Publications Print Publications 600+ online at ftc.gov 600+ online at ftc.gov Available in bulk – free Available in bulk – free Multimedia Multimedia Video – YouTube.com Video – YouTube.com Interactive tutorials Interactive tutorials

Data Security and Identity Theft

F EDERAL T RADE C OMMISSION PROTECTING AMERICA’S CONSUMERS Data Security Enforcement 20 data security cases 20 data security cases Most recent cases Most recent cases TJX TJX Lexis Nexis Lexis Nexis

F EDERAL T RADE C OMMISSION PROTECTING AMERICA’S CONSUMERS The President’s Identity Theft Task Force 17 Federal partners 17 Federal partners Strategic Plan Strategic Plan Released April 2007 Released April 2007 Task Force Website Task Force Website

F EDERAL T RADE C OMMISSION PROTECTING AMERICA’S CONSUMERS Task Force Recommendations 31 recommendations, organized around life cycle of identity theft 31 recommendations, organized around life cycle of identity theft Prevention Prevention Victim recovery Victim recovery Deterrence and punishment Deterrence and punishment

F EDERAL T RADE C OMMISSION PROTECTING AMERICA’S CONSUMERS Task Force Progress Data security and breach management guidance to government agencies Data security and breach management guidance to government agencies OPM led effort to eliminate uses of SSNs in federal human resource functions OPM led effort to eliminate uses of SSNs in federal human resource functions DOJ legislative recommendations on prosecution of identity theft DOJ legislative recommendations on prosecution of identity theft Expanded training for prosecutors Expanded training for prosecutors Victim assistance Victim assistance FTC workshops FTC workshops FTC education FTC education

Education

F EDERAL T RADE C OMMISSION PROTECTING AMERICA’S CONSUMERS Outreach & Business Guidance

F EDERAL T RADE C OMMISSION PROTECTING AMERICA’S CONSUMERS Interactive Online Tutorial

Other Technology Issues

F EDERAL T RADE C OMMISSION PROTECTING AMERICA’S CONSUMERS Behavioral Advertising November 2007 Town Hall November 2007 Town Hall December 2007 Issued Self-Regulatory Principles for Public Comment December 2007 Issued Self-Regulatory Principles for Public Comment April 2008 Comments received and being reviewed April 2008 Comments received and being reviewed

F EDERAL T RADE C OMMISSION PROTECTING AMERICA’S CONSUMERS Spam and Phishing Enforcement Enforcement 94 actions against over 250 defendants 94 actions against over 250 defendants Recent actions Recent actions Valueclick Valueclick Spear Systems Spear Systems Education Education Websites Websites Phishing ecard Phishing ecard Publications Publications

F EDERAL T RADE C OMMISSION PROTECTING AMERICA’S CONSUMERS Spam and Phishing Policy Research and Development Policy Research and Development July 2007 Spam Summit July 2007 Spam Summit Filtering works Filtering works Industry tools Industry tools April 2008 Phishing Roundtable April 2008 Phishing Roundtable Task Force on Phishing Education Task Force on Phishing Education Landing Pages Landing Pages Phishing Videos Phishing Videos

F EDERAL T RADE C OMMISSION PROTECTING AMERICA’S CONSUMERS Phishing Video: “Phishy Home”

F EDERAL T RADE C OMMISSION PROTECTING AMERICA’S CONSUMERSSpyware Since October 2004, we have brought 11 cases that stand for 3 principles Since October 2004, we have brought 11 cases that stand for 3 principles Consumer’s computer belongs to him or her Consumer’s computer belongs to him or her Buried disclosures of material information necessary to correct an otherwise misleading impression do not work Buried disclosures of material information necessary to correct an otherwise misleading impression do not work Consumers must be able to uninstall and remove unwanted software Consumers must be able to uninstall and remove unwanted software

F EDERAL T RADE C OMMISSION PROTECTING AMERICA’S CONSUMERS Mobile Commerce Topics Topics Mobile messaging services Mobile messaging services Consumers’ control Consumers’ control Challenges of the small screen Challenges of the small screen Targeting children and teens Targeting children and teens Best practices in preventing fraud Best practices in preventing fraud Security threats and solutions Security threats and solutions Next-generation products/services Next-generation products/services

Things of Interest

F EDERAL T RADE C OMMISSION PROTECTING AMERICA’S CONSUMERS National Do Not Call Registry 155 million numbers registered 155 million numbers registered No expiration date No expiration date

F EDERAL T RADE C OMMISSION PROTECTING AMERICA’S CONSUMERSChildren Education Education ftc.gov/YouAreHere ftc.gov/YouAreHere Social Networking Social Networking Congressional legislation Congressional legislation

F EDERAL T RADE C OMMISSION PROTECTING AMERICA’S CONSUMERS Ordering Publications FTC offers practical information on a variety of topics to help consumers avoid rip-offs and exercise their consumer rights, and to help businesses comply with the law. Single Copies Single Copies View, print, and download publications from ftc.gov. View, print, and download publications from ftc.gov. Bulk Orders (50 or More Copies) Bulk Orders (50 or More Copies) Place order at ftc.gov/bulkorder. Place order at ftc.gov/bulkorder.

Protecting the Security of Your Information Mary Beth Richards Federal Trade Commission May 7, 2008