Scarinci Hollenbeck, LLC, LLCScarinci Hollenbeck, LLC, LLC

Firm News

The Anatomy of an FTC Data Breach Investigation

Author: Scarinci Hollenbeck, LLC

Date: June 11, 2015

Key Contacts

Back

The Anatomy of an FTC Data Breach Investigation – How does the Commission operate?

While we all await national data breach standards, the Federal Trade Commission (FTC) has made it clear that it plans to continue to assert its consumer protection authority and bring privacy and data security enforcement actions. In a recent blog post, Mark Eichorn, an Assistant Director in the FTC Bureau of Consumer Protection’s Division of Privacy and Identity Protection, outlined how the FTC typically investigates a potential data breach.

When launching a data breach investigation, the agency relies on Section 5(a) of the Federal Trade Commission Act, which prohibits “unfair or deceptive acts or practices in or affecting commerce.” The statute broadly defines unfair practices as those that “cause or [are] likely to cause substantial injury to consumers…not reasonably avoidable by consumers themselves and not outweighed by countervailing benefits to consumers or to competition.”

While the FTC may first initiate an informal investigation, it also has the power to subpoena corporate documents and testimony, such as security risk assessments, privacy policies, and training protocols. According to the FTC, its goal is to determine the circumstances surrounding the breach: what happened, what protections were in place at the time, and how the company responded. It then uses that information to determine whether to bring an enforcement action.

According to the FTC, it often decides to launch an investigation based on news reports, complaints from consumers or other companies, or requests from Congress or other government agencies. In the absence of a legal obligation to notify regulators of a data breach, companies must decide whether to self-report the issue to federal or state authorities. In its blog post, the FTC makes it clear that it favors companies that alert state or federal authorities when breaches occur rather than waiting for the FTC to come knocking.

As Eichorn writes:

We’ll also consider the steps the company took to help affected consumers, and whether it cooperated with criminal and other law enforcement agencies in their efforts to apprehend the people responsible for the intrusion. In our eyes, a company that has reported a breach to the appropriate law enforcers and cooperated with them has taken an important step to reduce the harm from the breach. Therefore, in the course of conducting an investigation, it’s likely we’d view that company more favorably than a company that hasn’t cooperated.

Of course, no good deed goes unpunished, and self-reporting can also backfire.  While the company may think that they took all of the appropriate steps to address a data breach, the FTC’s investigation may conclude otherwise and impose unexpected fines and penalties. Accordingly, all legal decisions in the wake of a potential data breach should be made in consultation with experienced counsel.

###

Do you have any feedback, thoughts, reactions or comments concerning this topic? Feel free to leave a comment below for Fernando M. Pinguelo.

Follow the twitter accounts @CyberPinguelo and @eWHW_Blog for timely comments on related issues. If you have any questions about this post or would like assistance with your legal needs, please contact me or the Scarinci Hollenbeck attorney with whom you work. To learn more about data privacy and security, visit eWhiteHouse Watch – Where Technology, Politics, and Privacy Collide (http://ewhwblog.com)

No Aspect of the advertisement has been approved by the Supreme Court. Results may vary depending on your particular facts and legal circumstances.

Scarinci Hollenbeck, LLC, LLC

Related Posts

See all
Feedspot Names Government & Law Blog One of the Top Public Law Blogs post image

Feedspot Names Government & Law Blog One of the Top Public Law Blogs

FeedSpot Recognizes Donald Scarinci’s Government & Law Blog One of the Top 20 Public Law Blogs Little Falls, NJ – May 22, 2025 – Scarinci Hollenbeck, LLC is honored to share that Managing Partner Donald Scarinci’s Government & Law blog has been listed by FeedSpot.com as one of the “20 Best Public Law Blogs and […]

Author: Scarinci Hollenbeck, LLC

Link to post with title - "Feedspot Names Government & Law Blog One of the Top Public Law Blogs"
Scarinci Hollenbeck's Ron Bienstock Speaks at 100th Bomb Group's 2025 Reunion post image

Scarinci Hollenbeck's Ron Bienstock Speaks at 100th Bomb Group's 2025 Reunion

SH Partner and 100th Bomb Group Foundation Legal Counsel Discussed The Nuremberg Trials and the Law May 21, 2025 – Little Falls, NJ – Scarinci & Hollenbeck, LLC is proud to share that partner Ronald S. “Ron” Bienstock recently spoke at the 100th Bomb Group Biennial Reunion, held May 15-18, 2025, in New Orleans. The […]

Author: Ronald S. Bienstock

Link to post with title - "Scarinci Hollenbeck's Ron Bienstock Speaks at 100th Bomb Group's 2025 Reunion"
FeedSpot Names Donald Scarinci’s Constitutional Law Reporter One of the Top 100 Legal Blogs  post image

FeedSpot Names Donald Scarinci’s Constitutional Law Reporter One of the Top 100 Legal Blogs 

Little Falls, NJ – May 1, 2025 – Scarinci Hollenbeck, LLC is proud to share that Managing Partner Donald Scarinci’s Constitutional Law Reporter blog has been listed by FeedSpot.com as one of the “Top 100 Legal Blogs.” No Aspect of the advertisement has been approved by the Supreme Court. Feedspot, a content reader that curates websites of […]

Author: Donald Scarinci

Link to post with title - "FeedSpot Names Donald Scarinci’s Constitutional Law Reporter One of the Top 100 Legal Blogs "
FeedSpot Names Donald Scarinci’s Government & Law Blog One of the Top 80 New Jersey Blogs  post image

FeedSpot Names Donald Scarinci’s Government & Law Blog One of the Top 80 New Jersey Blogs 

Little Falls, NJ – May 1, 2025 – Scarinci Hollenbeck, LLC is proud to share that Managing Partner Donald Scarinci’s Government & Law blog has been listed by FeedSpot.com as one of the “80 Best New Jersey Blogs and Websites in 2025.” *No Aspect of the advertisement has been approved by the Supreme Court of New […]

Author: Donald Scarinci

Link to post with title - "FeedSpot Names Donald Scarinci’s Government & Law Blog One of the Top 80 New Jersey Blogs "
Nathanya G. Simon Named to ROI-NJ Influencers "Women in Business" 2025 List post image

Nathanya G. Simon Named to ROI-NJ Influencers "Women in Business" 2025 List

Scarinci Hollenbeck Partner Nathanya G. Simon named by ROI-NJ to the “ROI Influencers: Women in Business” list for fourth consecutive year Scarinci Hollenbeck Partner Nathanya G. Simon has been named by ROI-NJ to the “ROI Influencers: Women in Business” list for 2025. After four decades of practice, Nathanya’s pioneering influence in the field of special […]

Author: Nathanya G. Simon

Link to post with title - "Nathanya G. Simon Named to ROI-NJ Influencers "Women in Business" 2025 List"
SH Partner Angela Turiano Named Director of Legislative Affairs for SHRM Princeton post image

SH Partner Angela Turiano Named Director of Legislative Affairs for SHRM Princeton

Congratulations Angela Turiano on appointment as Director of Legislative Affairs for SHRM Princeton April 17, 2025 – Little Falls, NJ – Scarinci & Hollenbeck, LLC congratulates Partner Angela Turiano on her appointment as Director of Legislative Affairs for SHRM Princeton. Along with serving as a member of SHRM Princeton’s leadership team, Angela will monitor pending legislative, regulatory, […]

Author: Angela A. Turiano

Link to post with title - "SH Partner Angela Turiano Named Director of Legislative Affairs for SHRM Princeton"

No Aspect of the advertisement has been approved by the Supreme Court. Results may vary depending on your particular facts and legal circumstances.

Sign up to get the latest from our attorneys!

Explore What Matters Most to You.

Consider subscribing to our Firm Insights mailing list by clicking the button below so you can keep up to date with the firm`s latest articles covering various legal topics.

Stay informed and inspired with the latest updates, insights, and events from Scarinci Hollenbeck. Our resource library provides valuable content across a range of categories to keep you connected and ahead of the curve.

Let`s get in touch!

* The use of the Internet or this form for communication with the firm or any individual member of the firm does not establish an attorney-client relationship. Confidential or time-sensitive information should not be sent through this form.

Sign up to get the latest from the Scarinci Hollenbeck, LLC attorneys!