Data Dive
Written and curated by a multidisciplinary group of attorneys, Akin Data Dive delivers key insights on cybersecurity, privacy and other data-related topics impacting organizations across the globe.
Search Results
Data Dive
The Federal Trade Commission (FTC) issued a consent order with alcohol delivery service Drizly and its CEO over allegations that multiple security failures led to a data breach that exposed the personal information of about 2.5 million consumers. The complaint alleges Drizly and its CEO’s actions constitute unfair and/or deceptive acts or practices in violation of section 5(a) of the Federal Trade Commission Act. Finalized on January 10, 2023, the order requires Drizly to destroy unnecessary data, limit future data collection and implement an information security program. Notably, it also personally binds the CEO to implement an information security program at any future business for the next 10 years.
Data Dive
This year has seen some substantial new data breach settlements including a $500,000 Federal Trade Commission (FTC) fine against CafePress, a $1.25 million multi-state class action settlement and $5 million New York Department of Financial Services (NYDFS) fine against Carnival Corporation (“Carnival”)1 and a $4.5 million NYDFS fine against EyeMed Vision Care LLC (“EyeMed”). In an era of increasing scrutiny around cybersecurity practice, this assortment of settlements across companies in varying industries offers insight into how regulators view the application of core cyber protections, as well as their growing willingness to prescribe them.
Data Dive
The U.S. Department of Justice (DOJ) Antitrust Division fined three major U.S. poultry processors and a data consulting company a total of $84.8 million for violating federal antitrust laws by allegedly conspiring to fix employee wages and benefits. This settlement speaks to the antitrust agencies’ public commitment to investigate and prosecute competitive harm in labor markets.
