FTC to Provide Weekly Insight on Reasonable Data Security

The Federal Trade Commission will publish a blog every Friday for several months on lessons learned from data security investigations that were closed without formal enforcement action, the FTC announced July 21.

Although the FTC makes public its administrative and federal court resolutions of formal data security enforcement actions, the process of investigations that are resolved short of such an action have been largely opaque. Sharing information on the nonpublic resolutions process may help companies, and their legal counsel, better understand what the FTC expects from companies held to a “reasonable data security” standard.

Christopher N. Olsen, privacy and cybersecurity ...