Consumers Affected
650,000
The FTC proposed a consent order against Global Tel*Link Corp. for failing to secure sensitive user data, leading to a breach affecting nearly 650,000 consumers, and for delaying notification for about nine months. The order requires the company to implement a comprehensive security program, notify affected users with credit monitoring, and report future breaches promptly.
Global Tel*Link must implement a data security program with change management and multifactor authentication, notify all affected users from the breach and provide credit monitoring, notify consumers and facilities within 30 days of future breaches, report security incidents to the FTC within 10 days, and is prohibited from misrepresenting its security practices.
In-house legal teams should review all vendor and customer agreements, particularly those with telecommunications or communication service providers (like prison communications services), as well as any data processing agreements. Specific clauses to scrutinize include data security obligations, breach notification requirements (including timelines and scope of affected parties), data retention and disposal policies, and provisions related to cloud or third-party storage. Given the FTC's focus on inadequate safeguards and delayed notification, contracts may need amendments to mandate specific security controls (e.g., encryption, access logs), shorten breach notification windows (e.g., from months to days), require immediate notification to all affected individuals and business partners (like correctional facilities), and include audit rights or certification requirements for security programs.
Entity
Global Tel*Link Corp.
Also known as: Global Tel*Link
Industry
TelecommunicationsOfficial Press Release
https://www.ftc.gov/news-events/news/press-releases/2023/11/ftc-takes-action-against-global-tellink-corp-failing-adequately-secure-data-notify-consumers-after
Complaint GlobalTelLinkCorp
https://www.ftc.gov/system/files/ftc_gov/pdf/Complaint-GlobalTelLinkCorp.pdf
DecisionandOrder GlobalTelLinkCorp
https://www.ftc.gov/system/files/ftc_gov/pdf/DecisionandOrder-GlobalTelLinkCorp.pdf
Federal Trade Commission Enforcement Page
https://www.ftc.gov/enforcement
"Global Tel*Link Corp."
"failed to implement adequate security safeguards"
"waited approximately nine months to notify affected customers"
The FTC referred a complaint against REPS & Company Inc. and company executives, alleging they bypassed ticket-issuer security controls and purchasing limits to acquire millions of tickets for resale. The complaint was filed by the Department of Justice, and the case will be decided by the court; the press release does not report a penalty or other remedy imposed.
The FTC sued Digital Forensics Corporation LLC and affiliated defendants, alleging they misled sextortion victims with promises of investigative and monitoring services that often were not provided, and used fake positive reviews. A federal court granted the FTC’s request to temporarily halt the defendants’ activities; the complaint remains for the court to decide.
The FTC alleged that Greenway Auto Group advertised vehicle prices thousands of dollars below the amounts consumers actually paid and used mailers falsely suggesting recipients had won cash prizes. Greenway agreed to an order requiring transparent pricing and prohibiting deceptive prize mailers and other misrepresentations; the press release does not state a monetary penalty.
The FTC sent warning letters to 24 large healthcare services companies, cautioning that incomplete, inaccurate, or untimely pricing information for scheduled medical care may be unfair or deceptive. The letters urge recipients to review their price-disclosure practices and take corrective action; they announce no fine or formal order.
$1.9M
The FTC alleged that Premier Franchising Group LLC and Franchise Fastlane LLC made deceptive and unsubstantiated claims about the Premier Martial Arts franchise opportunity and violated the Franchise Rule. The proposed settlements require the companies to pay a combined $1.85 million to compensate franchisees, prohibit certain misrepresentations, and require Franchise Rule compliance; certain franchisees may also cancel their agreements without penalty.
The FTC, Utah, and Nevada sued Lens.com Inc., alleging that it advertised artificially low contact lens prices while hiding mandatory checkout charges and misleading consumers about its AutoRefill subscription. The complaint seeks to stop the alleged practices; the court has not yet decided the case, and no penalty or remedy has been imposed.