Scarinci Hollenbeck, LLC, LLCScarinci Hollenbeck, LLC, LLC

Firm News

The Anatomy of an FTC Data Breach Investigation

Author: Scarinci Hollenbeck, LLC

Date: June 11, 2015

Key Contacts

Back

The Anatomy of an FTC Data Breach Investigation – How does the Commission operate?

While we all await national data breach standards, the Federal Trade Commission (FTC) has made it clear that it plans to continue to assert its consumer protection authority and bring privacy and data security enforcement actions. In a recent blog post, Mark Eichorn, an Assistant Director in the FTC Bureau of Consumer Protection’s Division of Privacy and Identity Protection, outlined how the FTC typically investigates a potential data breach.

When launching a data breach investigation, the agency relies on Section 5(a) of the Federal Trade Commission Act, which prohibits “unfair or deceptive acts or practices in or affecting commerce.” The statute broadly defines unfair practices as those that “cause or [are] likely to cause substantial injury to consumers…not reasonably avoidable by consumers themselves and not outweighed by countervailing benefits to consumers or to competition.”

While the FTC may first initiate an informal investigation, it also has the power to subpoena corporate documents and testimony, such as security risk assessments, privacy policies, and training protocols. According to the FTC, its goal is to determine the circumstances surrounding the breach: what happened, what protections were in place at the time, and how the company responded. It then uses that information to determine whether to bring an enforcement action.

According to the FTC, it often decides to launch an investigation based on news reports, complaints from consumers or other companies, or requests from Congress or other government agencies. In the absence of a legal obligation to notify regulators of a data breach, companies must decide whether to self-report the issue to federal or state authorities. In its blog post, the FTC makes it clear that it favors companies that alert state or federal authorities when breaches occur rather than waiting for the FTC to come knocking.

As Eichorn writes:

We’ll also consider the steps the company took to help affected consumers, and whether it cooperated with criminal and other law enforcement agencies in their efforts to apprehend the people responsible for the intrusion. In our eyes, a company that has reported a breach to the appropriate law enforcers and cooperated with them has taken an important step to reduce the harm from the breach. Therefore, in the course of conducting an investigation, it’s likely we’d view that company more favorably than a company that hasn’t cooperated.

Of course, no good deed goes unpunished, and self-reporting can also backfire.  While the company may think that they took all of the appropriate steps to address a data breach, the FTC’s investigation may conclude otherwise and impose unexpected fines and penalties. Accordingly, all legal decisions in the wake of a potential data breach should be made in consultation with experienced counsel.

###

Do you have any feedback, thoughts, reactions or comments concerning this topic? Feel free to leave a comment below for Fernando M. Pinguelo.

Follow the twitter accounts @CyberPinguelo and @eWHW_Blog for timely comments on related issues. If you have any questions about this post or would like assistance with your legal needs, please contact me or the Scarinci Hollenbeck attorney with whom you work. To learn more about data privacy and security, visit eWhiteHouse Watch – Where Technology, Politics, and Privacy Collide (http://ewhwblog.com)

No Aspect of the advertisement has been approved by the Supreme Court. Results may vary depending on your particular facts and legal circumstances.

Scarinci Hollenbeck, LLC, LLC

Related Posts

See all
Bloomberg Law Podcast Discusses Shaquille O’Neil FTX Settlement With Ron Bienstock post image

Bloomberg Law Podcast Discusses Shaquille O’Neil FTX Settlement With Ron Bienstock

Bloomberg Law Podcast Discusses Shaquille O’Neil FTX Settlement With Ron Bienstock Little Falls, NJ – June 24, 2025 – Scarinci & Hollenbeck, LLC Partner and Chair of the firm’s Intellectual Property and Entertainment & Media departments Ronald S. Bienstock recently joined the Bloomberg Law podcast to discuss Shaquille O’Neal settling a class-action lawsuit over his FTX endorsement. […]

Author: Scarinci Hollenbeck, LLC

Link to post with title - "Bloomberg Law Podcast Discusses Shaquille O’Neil FTX Settlement With Ron Bienstock"
Donald M. Pepe Leads Donation of Laptops to York Street Project post image

Donald M. Pepe Leads Donation of Laptops to York Street Project

Scarinci Hollenbeck Partner Facilitates Donation of 43 Laptops to Jersey City Organization Little Falls, NJ  – July 1, 2025 – Scarinci Hollenbeck, LLC is proud to recognize partner Donald M. Pepe’s dedication to the community by facilitating the donation of 43 new Dell laptops to the York Street Project. Don’s commitment and dedication to sourcing these […]

Author: Scarinci Hollenbeck, LLC

Link to post with title - "Donald M. Pepe Leads Donation of Laptops to York Street Project"
Feedspot Names Government & Law Blog One of the Top Public Law Blogs post image

Feedspot Names Government & Law Blog One of the Top Public Law Blogs

FeedSpot Recognizes Donald Scarinci’s Government & Law Blog One of the Top 20 Public Law Blogs Little Falls, NJ – May 22, 2025 – Scarinci Hollenbeck, LLC is honored to share that Managing Partner Donald Scarinci’s Government & Law blog has been listed by FeedSpot.com as one of the “20 Best Public Law Blogs and […]

Author: Scarinci Hollenbeck, LLC

Link to post with title - "Feedspot Names Government & Law Blog One of the Top Public Law Blogs"
Scarinci Hollenbeck's Ron Bienstock Speaks at 100th Bomb Group's 2025 Reunion post image

Scarinci Hollenbeck's Ron Bienstock Speaks at 100th Bomb Group's 2025 Reunion

SH Partner and 100th Bomb Group Foundation Legal Counsel Discussed The Nuremberg Trials and the Law May 21, 2025 – Little Falls, NJ – Scarinci & Hollenbeck, LLC is proud to share that partner Ronald S. “Ron” Bienstock recently spoke at the 100th Bomb Group Biennial Reunion, held May 15-18, 2025, in New Orleans. The […]

Author: Ronald S. Bienstock

Link to post with title - "Scarinci Hollenbeck's Ron Bienstock Speaks at 100th Bomb Group's 2025 Reunion"
FeedSpot Names Donald Scarinci’s Constitutional Law Reporter One of the Top 100 Legal Blogs  post image

FeedSpot Names Donald Scarinci’s Constitutional Law Reporter One of the Top 100 Legal Blogs 

Little Falls, NJ – May 1, 2025 – Scarinci Hollenbeck, LLC is proud to share that Managing Partner Donald Scarinci’s Constitutional Law Reporter blog has been listed by FeedSpot.com as one of the “Top 100 Legal Blogs.” No Aspect of the advertisement has been approved by the Supreme Court. Feedspot, a content reader that curates websites of […]

Author: Donald Scarinci

Link to post with title - "FeedSpot Names Donald Scarinci’s Constitutional Law Reporter One of the Top 100 Legal Blogs "
FeedSpot Names Donald Scarinci’s Government & Law Blog One of the Top 80 New Jersey Blogs  post image

FeedSpot Names Donald Scarinci’s Government & Law Blog One of the Top 80 New Jersey Blogs 

Little Falls, NJ – May 1, 2025 – Scarinci Hollenbeck, LLC is proud to share that Managing Partner Donald Scarinci’s Government & Law blog has been listed by FeedSpot.com as one of the “80 Best New Jersey Blogs and Websites in 2025.” *No Aspect of the advertisement has been approved by the Supreme Court of New […]

Author: Donald Scarinci

Link to post with title - "FeedSpot Names Donald Scarinci’s Government & Law Blog One of the Top 80 New Jersey Blogs "

No Aspect of the advertisement has been approved by the Supreme Court. Results may vary depending on your particular facts and legal circumstances.

Sign up to get the latest from our attorneys!

Explore What Matters Most to You.

Consider subscribing to our Firm Insights mailing list by clicking the button below so you can keep up to date with the firm`s latest articles covering various legal topics.

Stay informed and inspired with the latest updates, insights, and events from Scarinci Hollenbeck. Our resource library provides valuable content across a range of categories to keep you connected and ahead of the curve.

Let`s get in touch!

* The use of the Internet or this form for communication with the firm or any individual member of the firm does not establish an attorney-client relationship. Confidential or time-sensitive information should not be sent through this form.

Sign up to get the latest from the Scarinci Hollenbeck, LLC attorneys!