The Federal Trade Commission announced today that it has taken action against LifeLock for violations of its settlement with the agency and 35 state attorneys general, but declined to provide specifics on what penalties the company could face, aside from asking a court to impose an order requiring full redress to all customers affected by the violations.
According to the FTC complaint [PDF] filed in U.S. District Court in Arizona, from at least October 2012 until March 2014, LifeLock failed live up to is obligations under the 2010 settlement.
Under the previous deal, LifeLock was barred from making deceptive claims about services and was required to take more stringent measures to safeguard the personal information it collects from customers. The company also agreed to provide $11 million in refunds to customers.
At the time of the agreement, Illinois Attorney General Lisa Madigan said that LifeLock had essentially promised not to misrepresent that its services offer “absolute protection against identity theft because there is, unfortunately, no foolproof way to avoid ID theft.”
The FTC alleges the company broke that promise by continuing to make claims that it protected consumers’ sensitive data with the same high-level safeguards as financial institutions.
The Commission assets that from January 2012 through December 2014, LifeLock falsely claimed it protected consumers’ identity 24/7/365 by providing alerts “as soon as” it received any indication there was a problem.
Additionally, the complaint states that LifeLock violated its previous order by failing to establish and maintain a comprehensive information security program to protect its users’ sensitive personal data, including credit card, social security, and bank account numbers.
FTC Takes Action Against LifeLock for Alleged Violations of 2010 Order [Federal Trade Commission]
by Ashlee Kieler via Consumerist
No comments:
Post a Comment