EPIC Consumer Privacy Project
EPIC has a particular interest in protecting consumer privacy and has played a leading role in developing the authority of the Federal Trade Commission to address emerging privacy issues and to safeguard the privacy rights of consumers. From its early days, EPIC has worked to ensure that the Federal Trade Commission, the Federal Communications Commission, and other agencies help protect the privacy of consumer and Internet users.
In a series of high-profile complaints brought in 2009 and 2010, with the support of other consumer privacy organizations, EPIC helped the FTC establish comprehensive privacy programs for Google and Facebook. EPIC’s complaint concerning Google Buzz provided the basis for the investigation and subsequent settlement in which the Commission found that “Google used deceptive tactics and violated its own privacy promises to consumers when it launched [Buzz].” The Commission’s settlement with Facebook also followed from a Complaint filed by EPIC and a coalition of consumer privacy organizations.
EPIC continues to write and publish complaints, comments, and letters to agencies and authorities on behalf of internet consumers. A list of EPIC's recent work follows. Media coverage of EPIC’s consumer privacy work is also below.
Top News
- EPIC to FTC: Google's April Fool's Disaster Likely Violates Consent Order : Google's April Fool's joke — a change in the operation of Gmail without user consent — has backfired, spectacularly. Many Gmail users inadvertently enabled the "Mic Drop" button on important emails, allowing Google to insert a GIF into their reply and then irreversibly mute the conversation. Users were outraged and Google reversed the change. EPIC informed the FTC that Google's prank also likely violates the FTC's 2011 consent order with the company following the rollout of Google Buzz. EPIC has repeatedly urged the FTC to enforce this consent order against Google, which requires the company to obtain "express affirmative consent" before changing its business practices. (Apr. 1, 2016)
- FCC Moves Forward With Narrow Privacy Rules: The Federal Communications Commission has voted to adopt a Notice of Proposed Rulemaking on consumer privacy regulations. The proposal follows Chairman Wheeler's earlier draft proposal, which EPIC explained was too limited to safeguard online privacy. During the vote, Commissioner Ajit Pai echoed EPIC's view that the rulemaking should not focus solely on ISPs. EPIC has argued that the FCC proposal ignores invasive practices by Internet firms, including search companies and social media firms that track and profile Internet users. EPIC previously urged the Commission to "address the full range of communications privacy issues facing US consumers" and to apply the Consumer Privacy Bill of Rights to communications data. (Mar. 31, 2016)
- FTC Issues Warning on Cross-Device Tracking and Surveillance Apps +
- EPIC Urges FCC to Broaden Scope, Substance of Draft Privacy Rules +
- FCC to Consider Privacy Rules for ISPs +
- EPIC, Consumer Privacy Groups Urge FCC to Protect Consumer Privacy +
- EPIC Files Brief in Support of Apple and Consumers in FBI iPhone Case +
- EPIC Files Brief in Suit Over Faulty Background Checks +
- California AG Releases 2016 Data Breach Report, Retail and Financial Sectors Most Vulnerable +
- EPIC and Consumer Privacy Groups File Brief Supporting FCC in Telephone Privacy Case +
- Supreme Court Rules Settlement Offers Can't Moot Consumer Class Actions +
- EPIC Urges FCC to Establish Communications Privacy Protections for Consumers +
- Uber, New York AG Reach Settlement Over Rider Data Privacy Practices +
- FTC Issues Enforcement Policy Statement on Deceptive "Native" Advertising +
- EPIC Urges FTC to Protect Consumers Amid Surge in Cross-Device Tracking +
- Senators Blumenthal, Markey Propose Do Not Track Legislation +
- Wyndham Settles FTC Charges Over Failure to Safeguard Customer Data +
- Administrative Decision Tosses LabMD Data Security Case +
- Not So Picture Perfect: Snapchat Will Store User Content Forever +
- News Reports: FTC Investigating Google Anti-Competitive Practices +
- FTC Approves Final Order With Nomi Over Location Tracking +
- Appeals Court Upholds FTC's Data Security Authority +
- Without Public Comment, FTC Narrows Section 5 Authority +
- FTC Sues LifeLock For Violating Consent Agreement +
- Senators Markey and Blumenthal Introduce Bill to Protect Drivers from Remote Hacking +
- EPIC Urges Investigation of "Always On" Consumer Devices +
- EPIC Files FTC Complaint Against Uber about Plan to Track Users and Gather Contact List Data +
- EPIC Pursues Investigation of FTC's 2012 Investigation of Google +
- EPIC Pursues Reports from FTC's 2012 Investigation of Google +
- Wall Street Journal Reveals FTC Ignored Google's Anticompetitive Practices +
- EPIC Files Comments with FTC on Merger Review and Consumer Privacy +
- Senators Propose Law to Regulate Data Broker Industry +
- Federal Courts Considers FTC's Data Protection Authority +
- White House (Commerce Dept.) Privacy Bill Not Helpful, Unworkable +
- EPIC Challenges Samsung's Surveillance of the Home, Files FTC Complaint +
- Senator Markey Report Warns of Risks with "Connected Cars" +
- Consumer Groups Urge FTC Review of Data Consolidation +
- Senators Challenge Verizon's Secret Mobile Tracking Program +
- Obama Calls for Disclosure of Secret Credit Scores +
- Obama Announces New Consumer Privacy Initiatives +
- FTC Chair Warns About Risks of Connected Devices +
- FTC Charges Data Broker with Theft +
- FTC Finalizes Snapchat Settlement +
- Dutch Privacy Officials Find Google Violates National Privacy Law +
- FTC Fines TRUSTe, Privacy Certification Company +
- Senator Rockefeller Questions Whisper About Privacy Practices +
- Facebook Responds to EPIC Complaint About "Emotions Study" +
- FTC To Explore "Big Data" and Discrimination +
- Federal Trade Commission Orders Google to Refund Parents $19 Million for Unauthorized Charges +
- EU Launches Investigation Into Facebook Acquisition of WhatsApp +
- Consumer Privacy Organizations Urge Judge to Reject "Privacy Settlement" +
- Senator Schumer Calls On Regulators to Make Fitness Data Private +
- Federal Trade Commission Responds to EPIC Regarding Google Settlement +
- Consumer Privacy Organizations Oppose Farcical Class Action Settlement +
- EPIC, Consumer Groups Challenge Facebook on Web Snooping +
- EPIC Tells Congress FTC Does Not Enforce Consent Orders +
- Privacy Lawsuit Against Google for Policy Change Moves Forward +
- Following EPIC Complaint, Senator Seeks Investigation of Facebook User Manipulation Study +
- FTC Sues Amazon Over Billing for Childrens' In-App Purchases +
- EPIC Challenges Facebook's Manipulation of Users, Files FTC Complaint +
- FTC Releases 2014 Data Security Update, But Enforcement Questions Remain +
- FTC Ignores Public Comments on Safe Harbor Settlements +
- Facebook to Profile User Browsing, May Violate FTC Consent Order +
- EPIC Urges FTC to Protect Snapchat Users' Privacy +
- Federal Trade Commission Urges Court to Protect Student Privacy +
- FTC Report on Data Brokers Fails to Address Consumer Privacy Concerns +
- Sprint Pays FCC A Record $7.5M For Violating Do Not Call +
- EPIC's Snapchat Privacy Complaint Results in 20-Year FTC Consent Order +
- Facebook Introduces New Privacy Features +
- Patent to Block Facial Recognition Follows Sale of Google Glass +
- Report Reveals Rise in Teens' Desire for Online Privacy +
- Court Upholds FTC Authority to Safeguard Data Privacy +
- FTC Responds to EPIC Complaint on WhatsApp and Privacy +
- FTC Commissioner Wright Meets with Industry Lobbyists, Not Consumer Representatives +
- Fandago and Credit Karma Settle FTC Charges for Weak App Security +
- Federal Trade Commission Backs Users in Facebook Privacy Case +
- FTC Adopts EPIC's Recommendations on Improved FOIA Processing +
- EPIC Updates Facebook Complaint, Urges Careful Review of WhatsApp Acquisition +
- WhatsApp Founder Responds to EPIC Privacy Complaint +
- EPIC Urges FTC Investigation of WhatsApp Sale to Facebook +
- EPIC Files Amicus Brief in Facebook Consumer Privacy Case, Urges Rejection of Settlement +
- EPIC Urges FTC to Strengthen Safe Harbor Settlements +
- Senators Rockefeller and Markey Propose Data Broker Legislation +
- FTC Chair Ramirez Urges Senate to Act on Data Security Legislation +
- French Data Protection Authority Fines Google for Data Consolidation +
- Snapchat Data Breach Exposes 4.6 Million Usernames +
- Senate Report Shines Light on How Data Brokers Operate +
- Lights Out for Flashlight App Developer in Privacy Case +
- FTC Announces 2014 Privacy Workshops +
- EPIC Files FOIA Request with FTC About Facebook Investigation +
- Google Announces Plan to Post Names and Photos of Users for Advertising Without Consent, May Violate 2011 FTC Consent Order +
- Facebook Removes Crucial Privacy Setting for Users’ Names +
- Consumer Privacy Groups Ask Congress to End Secret Hearings on Data Industry +
- Pressure Mounts on Facebook to Withdraw Proposed Changes, New Scrutiny of "Faceprints" +
- EPIC, Privacy Groups, Urge FTC to Block Facebook Policy Changes +
- EPIC Asks FTC To Investigate "Magna Carta" App +
- EU Officials Recommend Do Not Track by Default +
- Google Bans Facial Recognition Glass Apps +
- EPIC Submits Comments on the "Internet of Things" +
- FTC Opens Investigation into Google Advertising Dominance +
- EPIC Asks FTC to Investigate Snapchat +
- FTC Rejects Industry Effort to Delay Children’s Privacy Rules +
- EPIC Pursues Public Release of Facebook and MySpace Privacy Reports +
- Consumer Groups Oppose Delay for New Children’s Privacy Rules +
- FTC Releases 2013 Report +
- EPIC Comments on FTC's FOIA Procedures +
- EU Takes Action Against Google for Privacy Policy Meltdown +
- EPIC, Consumer Privacy Groups Call on FTC Chair to Appoint Consumer Advocate for Key Office +
- FTC Approves Final Settlement over Consumer Tracking, Fails to Enforce FIPs or Suggest Best Practices for Anonymization +
- FTC Reaches Settlement with Mobile App Path over Privacy Violations +
- FTC Denies White House Involvement in Decision to Close Google Investigation +
- FTC Closes Investigation into Google Search Bias +
- FTC Releases Updated Children’s Online Privacy Rule +
- FTC Pursues Investigation of Data Brokers +
- Instagram Privacy Change Raises Legal Questions +
- FTC Report Finds Privacy Problems for Children’s Mobile Apps +
- EPIC: Hearing on FTC Nominee Should Address FTC's Settlement Process for Privacy Violations +
- Privacy Groups Ask Facebook to Withdraw Proposed Changes +
- Pew Survey Finds Most Parents Concerned About Children's Online Privacy +
- FTC Releases 2012 Performance Report +
- EPIC Submits Comments to FTC on Consumer Tracking Settlement +
- Senate Reauthorizes SAFE WEB Act +
- Lawmakers Gain "Partial Glimpse" into Data Brokers' Business Practices +
- EPIC Comments on FTC Rent-to-Own Computer Spying Settlement +
- Federal Trade Commission Proposes "Best Practices" for Facial Recognition Technology +
- Verizon Begins Invasive Marketing Program +
- FTC Holds "Robocall Summit" +
- EPIC FOIA Uncovers Google’s Privacy Assessment +
- Consumer Groups Ask FTC to Investigate Facebook-Datalogix Data-Matching Arrangement +
- EPIC Supports New Children’s Privacy Rule +
- Facebook Ceases Facial Recognition in European Union +
- FTC Finalizes Settlement with Myspace +
- FTC Finalizes Settlement with Facebook +
- FTC Proposes Additional Changes to Children’s Online Privacy Rule +
- EPIC Urges FTC to Develop Meaningful Privacy Protections for Mobile Services +
- EPIC Calls On FTC to Investigate Facebook Email Changes +
- Spokeo to Pay $800, 000 to Trade Commission to Settle Privacy Violations +
- EPIC Urges FTC to Protect Privacy of Myspace Users +
- Facebook Users Force Vote on Privacy Changes +
- EPIC Calls on FTC to Develop Substantive Privacy Protections at Workshop on Mobile Advertising +
- Myspace Settles With FTC Over Deceptive Practices Complaint +
- FTC Announces $30 Million Penalty Against Deceptive Robocallers +
- FTC Announces Settlement with RockYou Over Security Flaws, COPPA Violations +
- Federal Trade Commission Calls for Privacy Legislation +
- Facebook Policy Changes Raises Questions About Compliance with 2011 Consent Order +
- Twitter to Sell Two Years' Worth of Old Tweets +
- European Justice Minister Says Google Now in Violation of EU Law +
- Identity Theft Remains Top Concern of US Consumers +
- FTC Chairman: Google Users Face a "brutal choice" -- Europeans: "Google's new policy does not meet the requirements of the European Directive on Data Protection." +
- EPIC Appeals Court Ruling in Google Privacy Case +
- Privacy Groups to Rep. Bono-Mack: "Hold *Public* Hearings on Google Privacy Changes" +
- Judge Rules that Courts Lacks Jurisdiction over FTC, Acknowledges "Serious Concerns" with Google Privacy Changes +
- White House Sets Out Consumer Privacy Bill of Rights +
- EPIC Urges Federal Court To Hold FTC Accountable for Failure to Enforce Google Consent Order +
- FTC Files Opposition / Motion to Dismiss in EPIC v FTC +
- "FOIA Matters" - EPIC Obtains Google Privacy Compliance Report +
- EPIC to FTC: Enforce the Google Consent Order +
- FTC Report Shows Privacy Problems with Mobile Apps +
- Google Report Raises New Questions About Compliance with Consent Order +
- EPIC Sues Federal Trade Commission to Enforce Google Consent Order +
- EPIC Seeks Public Release of Google's Privacy Report +
- EPIC Calls for Moratorium on Facial Recognition Technology +
- Google Changes Privacy Practices, Consolidates User Data +
- FTC Adds Google+ to Antitrust Investigation +
- EPIC Urges FTC Investigation into Facebook Timeline +
- EPIC Submits Comments on FTC Facebook Privacy Settlement +
- EPIC Submits Comments on Children's Online Privacy Rule +
- Senate Opens Investigation Into Google Search +
- EPIC Launches Campaign Urging Public Comment on Facebook Privacy Settlement +
- Federal Trade Commission Releases 2011 Do Not Call List, Warns of Do Not Call Scams +
- Federal Trade Commission Announces Settlement in EPIC Facebook Privacy Complaint +
- Federal Trade Commission to Announce Settlement in EPIC Facebook Privacy Complaint +
- FTC Releases Agenda for Facial Recognition Workshop +
- FTC Publishes Performance Report +
- WSJ: Facebook Close to Settlement with FTC over EPIC Complaint +
- EPIC Files Complaint, Urges FTC to Investigate Verizon's Recent Changes to Privacy Practices +
- EPIC-Led Coalition Calls for FTC Facebook Investigation +
- Lawmakers Say Undeletable Supercookies Raise "Serious Privacy Concerns" +
- Senate Holds Hearing on Google’s Anticompetitive Practices +
- Federal Trade Commission Proposes New Rules for Children’s Online Privacy +
- US and European Consumer Groups Oppose Latest Industry Proposal for Self-Regulation +
- EPIC Urges FTC to Examine YouTube Search Rankings Following Google Acquisition +
- EPIC Settles Street View Case with Trade Commission +
- FTC Finds Mobile Phone App Violated Children's Privacy Law +
- Federal Trade Commission Launches Google Antitrust Investigation +
- FCC and FTC Announce Public Meeting on Locational Privacy +
- EPIC Briefing to Explore Google Street View and Wi-Fi Privacy +
- EPIC Sues Federal Trade Commission for Details on Spy-Fi Investigation +
- EPIC Proposes "Fair Information Practices" for Google +
- Public Submits Comments on Proposed Google Consent Order +
- Senators Kerry and McCain introduce Internet Privacy Legislation +
- EPIC Launches "Fix Google Privacy" Campaign +
- FTC Releases Annual Report, Highlights Consumer Protection +
- FTC Announces Agreement in EPIC Google Buzz Complaint +
- Senate Antitrust Agenda Includes Google, FTC Oversight +
- EPIC Says FTC Has Failed to Safeguard Consumer Privacy +
- EPIC Pursues Investigation of FTC's Spy-Fi Noninvestigation +
- Federal Trade Commission Extends Deadline for Comments on Privacy Report +
- FTC: Investigating Google Street View is a "waste of summer" +
- Federal Trade Commission Recommends Do Not Track, Privacy by Design, and Short Privacy Notices +
- Wall Street Journal Confirms FCC Investigation of Google Street View Following EPIC Complaint +
- FTC Appoints Executive Director, Chief Technology Officer +
- Federal Trade Commission Closes Noninvestigation of Google Street View +
- FTC Proposes Consent Decree in U.S. Search Case +
- EPIC Urges Federal Trade Commission to Strengthen Childrens' Privacy Rule +
- Congressional Leaders Write to Google's Schmidt About "Spy-Fi" +
- New Facebook Privacy Complaint Filed with Trade Commission +
- EPIC Recommends Effective Consumer Privacy Standards, Calls Notice and Choice a "Failed Experiment" +
- Senate Confirms Julie Brill as FTC Commissioner +
- Federal Trade Commission Sets out Priorities But Lacks Strategy for Privacy Protection +
- EPIC Urges FTC to Protect Users' Privacy On Cloud Computing and Social Networking Services +
- EPIC Defends Privacy of Facebook Users: Files Complaint with the Federal Trade Commission +
- FTC Considers Emerging Privacy Concerns at First Privacy Roundtable +
- President Obama Nominates Brill and Ramirez for Federal Trade Commission +
- EPIC to FTC: "Parental Control" Software Firm Gathers Data for Marketing +
- Federal Trade Commission to Host Privacy Roundtables +
- Trade Commission Prohibits Robocalls +
- FTC Issues Final Breach Notification Rule for Electronic Health Information +
- Privacy and Consumer Groups Seek New FTC Commissioner +
- Federal Trade Commission to Review EPIC Cloud Computing Complaint +
- EPIC Petitions FTC to Investigate Google, Cloud Computing Services +
- Trade Commission Issues Voluntary Guidelines for Online Tracking, Targeting, and Advertising +
- Consumer Groups Urge Trade Commission to Investigate Mobile Marketing +
More top news
EPIC's work on consumer privacy includes the following subject areas:
Internet of Things
"The Internet of Things" (IoT) refers to the capability of everyday devices to connect to other devices and people through the existing Internet infrastructure. This increased connectivity raises a myriad of consumer privacy and data security issues.
Featured Pages
Featured Agency Comments
EPIC's Comments to the Federal Trade Commission
EPIC's FTC Complaints
In re: Samsung 'SmartTVs'
EPIC's complaint concerns the consumer privacy violations of Samsung's "always on" SmartTV.
Documents
EPIC's Complaint
February 24, 2015
EPIC's Testimony and Letters
- Testimony on "The Internet of Cars" before the U.S. House of Representatives Committee on Oversight and Government Reform, Nov. 18, 2015
- EPIC Letter to FTC re: "Always-On" Devices (July 10, 2015). EPIC urged the FTC and DOJ to investigate "Always-On" Consumer Devices that record and store private communications
Additional Resources
Internet Privacy, Online Tracking & Big Data
Online tracking continues to grow increasingly complex and pervasive, and it poses a great threat to consumer privacy. Companies are amassing huge volumes of data with little understanding of the consequences and too few safeguards. Too often, the organizations gathering Big Data obtain the benefits, but the individuals bear the costs. This leads to asymmetries of power and new, more subtle means of control. EPIC fights to restore control to consumers over their personal data and to limit corporate abuse of consumer profiling and Big Data.
Featured Pages
- Online Tracking and Behavioral Profiling
- Privacy and Consumer Profiling
- Big Data and the Future of Privacy
- Consumer Privacy Bill of Rights
- Cookies
- Search Engine Privacy
- Cloud Computing
Amicus
Litigation
Featured Agency Comments
EPIC Comments to the Federal Trade Commission
- Cross-Device Tracking, Dec. 16, 2015
- In re: Remedy Study ("Assessment of the FTC's Prior Actions on Merger Review and Consumer Privacy"), Mar. 17, 2015
- In re Google Referrer Header Litigation, Jul. 31, 2014
- In re Google, Inc., Feb. 22, 2013
- In re Compete, Inc. ("Consumer Tracking Settlement"), Nov. 19, 2012
- In re In Short: Advertising and Privacy Disclosures in a Digital World, July 11, 2012
- In re Advertising and Privacy Disclosures in a Digital World, May 11, 2012
- In re A Preliminary FTC Staff Report on "Protecting Consumer Privacy in an Era of Rapid Change: A Proposed Framework for Businesses and Policymakers", Feb 18, 2011
EPIC's Comments to the Dept. of Commerce
- In re Multistakeholder Process to Develop Consumer Data Privacy Codes of Conduct, Apr. 2, 2012
- In re Information Privacy and Innovation in the Internet Economy, Jan. 25, 2011
EPIC's Comments to the Office of Science and Technology Policy
- In re Big Data and the Future of Privacy, Apr. 4, 2014
EPIC's FTC Complaints
In re: Scholarships.com
EPIC's complaint concerns the business practices of Scholarships.com
Documents
EPIC's Complaint
December 12, 2013
In re: Google (Cloud Computing)
EPIC's complaint urged the FTC to open an investigation into Google's Cloud Computing Services -- including Gmail, Google Docs, and Picasa -- to determine "the adequacy of the privacy and security safeguards."
Documents
EPIC's Complaint
March 17, 2009
In re: Awarenesstech.com, RemotePCSpy.com, Covert-Spy.com, RemoteSpy.com, and Spy-guide.net
EPIC's Domestic Violence and Privacy Project filed a complaint with the Federal Trade Commission against several purveyors of stalker spyware.
Documents
EPIC's Complaint
March 6, 2008
In re: AskEraser
EPIC's complaint alleges that Ask.com is engaging in unfair and deceptive trade practices concerning AskEraser, a product that purports to protect Internet search privacy.
In re: Google and DoubleClick
EPIC's complaint urged the Commission to open an investigation into the proposed acquisition of DoubleClick by Google, specifically with regard to the ability of Google to record, analyze, track, and profile the activities of Internet users with data that is both personally identifiable and data that is not personally identifiable.
In re: ChoicePoint
EPIC's complaint urged the agency to investigate the compilation and sale of personal dossiers by data brokers such as ChoicePoint.
In re: JetBlue and Acxiom
EPIC's complaint alleges that JetBlue and Acxiom violated federal consumer law when they transferred information on passengers in violation of their own privacy policies.
Documents
EPIC's Complaint
September 22, 2003
In re: DoubleClick and Abacus
EPIC's complaint alleges that DoubleClick violated laws prohibiting unfair and deceptive business practices.
Documents
EPIC's Complaint
February 10, 2000
Additional Resources
- Cookies & the DoubleClick Class Action Settlement
- Deep Packet Inspection & Privacy
- Digital Rights Management (DRM)
- Domain Name System (DNS) Security Extensions
- Electronic Numbering (ENUM)
- Microsoft Palladium: Next Generation Secure Computing Base
- Microsoft Passport
- Microsoft Passport Investigation Docket
- Project Liberty
- Re-identification
- SPAM - Unsolicited Commercial Email
- WHOIS
Communications Privacy
Featured Pages
- CPNI (Customer Proprietary Network Information)
- Deep Packet Inspection and Privacy
Amicus
- NCTA v. FCC (concerning privacy of CPNI)
- US West v. FCC (concerning privacy of CPNI) (2000)
Featured Agency Comments
EPIC's Comments to the FCC
- Letter to the FCC urging rulemaking on communications privacy, Jan. 20, 2016
- Letter to FCC Chairwoman regarding Verizon's unlawful disclosure of customer proprietary network information to the NSA, June 11, 2013
- In re Privacy and Security of Information Stored on Mobile Communications Devices, July 13, 2012
- In re Rules and Regulations Implementing the Truth in Caller ID Act of 2009, 2011
- In the Matter of Customer Proprietary Network Information, Apr. 14, 2006
EPIC's FTC Complaints
In re: Verizon Wireless
EPIC's complaint charges that Verizon Wireless has engaged in unfair and deceptive trade practices in violation of consumer protection law.
Documents
EPIC's Complaint
October 28, 2011
In re: Intelligent e-Commerce
EPIC's complaint concerns the illegal sale of personal information obtained from telephone carriers.
Additional Resources
Social Media and Apps
Featured Pages
Amicus
- Fraley v. Facebook ("Sponsored Stories")
Litigation
- EPIC v. FTC (Enforcement of the Google Consent Order)
Featured Agency Comments
EPIC's Comments to the Federal Trade Commission
- In re Snapchat, Jun. 9, 2014
- In re Myspace, LLC, June 8, 2012
EPIC's FTC Complaints
In re: Facebook (Psychological Study)
EPIC's complaint concerns Facebook's "secretive and non-consensual use of personal information to conduct an ongoing psychological experiment on 700,000 Facebook users, i.e. the company purposefully messed with people's minds."
Documents
EPIC's Complaint
July 3, 2014
In re: WhatsApp
EPIC's complaint concerns Facebook's proposed purchase of WhatsApp
In re: Samsung "JAY-Z Magna Carta" App
EPIC's complaint concerns Samsung's Magna Carta App, which collects massive amounts of personal information from users, including location data and data pulled from other accounts and other apps on the users phones.
Documents
EPIC's Complaint
July 12, 2013
In re: Snapchat
EPIC's complaint concerns Snapchat, the publisher of a mobile app that encourages user to share intimate photos and videos. The company represents that users can make photos and videos "disappear forever." In fact, the photos can be retrieved by others after they should have vanished.
Documents
EPIC's Complaint
May 16, 2013
In re Facebook II (Settings)
EPIC's complaint focuses on the unfair and deceptive trade practices of Facebook with respect to sharing of user information with third-party application developers.
Documents
EPIC's Complaint
May 5, 2010
In re: Google Buzz
EPIC's complaint focuses on the unfair and deceptive trade practices of Google with respect to Google's transformation of an email service to a social networking service without offering Gmail users meaningful control over their information or opt-in consent.
In re: Facebook
EPIC's complaint focuses on the unfair and deceptive trade practices of Facebook with respect to sharing of user information with third-party application developers.
FOIA
Additional Resources
Telemarketing
Featured Pages
Amicus
- ACA International v. FCC (2015 TCPA Order Litigation)
Featured Agency Comments
EPIC's Comments to the FTC
- In re CAN-SPAM Act Rulemaking (Do Not E-Mail), Mar. 31, 2004
- In re Telemarketing Rulemaking, Apr. 10, 2002
EPIC's Comments to the FCC
- In re Rules and Regulations Implementing the Telephone Consumer Protection Act of 1991 (on the implementation of the Junk Fax Prevention Act), Jan. 18, 2006
- In re Rules and Regulations Implementing the Telephone Consumer Protection Act of 1991 (on the notice of proposed rulemaking and the petition for declaratory ruling on the TCPA), July 29, 2005
EPIC's FTC Complaints
Letter from EPIC Exec. Dir. Marc Rotenberg to FTC Comm'r Christine Varney
Letter urged the FTC to investigate the misuse of personal information by the direct marketing industry
Documents
EPIC's Complaint
December 14, 1995
Additional Resources
Data Breach and Identity Theft
Featured Pages
Amicus
EPIC's Testimony to Congress
- Testimony before the Senate Special Committee on Aging on "Protecting Seniors from Identity Theft: Is the Federal Government Doing Enough?", Oct. 7, 2015
- Testimony before the House Subcommittee on Oversight and Investigations Committee on Financial Services and Subcommittee on Social Security Committee on Ways and Means, "SSNs and Identity Theft", Nov 8, 2011
- Testimony before the House Committee and Energy and Commerce, Subcommittee on Commerce, Trade, and Consumer Protection, "The Discussion Draft of H.R.____, A Bill to Require Greater Protection for Sensitive Consumer Data and Timely Notification in Case of Breach", June 15, 2011
Additional Resources
Location Privacy
Featured Pages
EPIC's FTC Complaints
In re: Uber Privacy Policy
EPIC's complaint charges that Uber's plan to track users and gather contact details is an unlawful and deceptive trade practice.
Documents
EPIC's Complaint
June 22, 2015
Additional Resources
Financial Privacy
Featured Pages
Amicus
Featured Agency Comments
EPIC's Comments to the CFPB
EPIC's FTC Complaints
In re: Experian
EPIC's complaint urged the FTC to investigate the marketing practices of credit reporting agency Experian for broadly disseminating advertising that offers for "free" credit reports, but actually provides an expensive credit monitoring service that individuals must cancel within thirty days.
Documents
EPIC's Complaint
September 16, 2003
Additional Resources
- The Right to Financial Privacy Act
- The Gramm-Leach-Bliley Act (Information on a 1999 federal law that establishes some protections against pretexting and limitations on data sharing for banks, insurance, and brokerage companies)
Medical Privacy
Since the creation of the Hippocratic oath about 400 B.C., protecting the privacy of patients has been an important part of physicians' code of conduct. Over time, health information has come into use by many organizations and individuals who are not subject to medical ethics codes, including employers, insurers, government program administrators, attorneys and others. As uses of medical information multiplied, so have regulatory protections for this highly sensitive and deeply personal information.
Featured Pages
Amicus
- IMS Health v. Sorrell (concerning the use of prescriber-identifiable data for targeted marketing)
- IMS Health v. Ayotte (concerning the use of prescriber-identifiable data for targeted marketing)
- FAA v. Cooper (concerning government disclosure of HIV status; emotional injury as harm under the Privacy Act)
Featured Agency Comments
EPIC Comments to the Dept. of Health and Human Services
- In re Human Subjects Research Protections, Jan. 6, 2016
- In re Human Subjects Research Protections, Oct. 26, 2011
Additional Resources
Children's Privacy
The Children's Online Privacy Protection Act ("COPPA") specifically protects the privacy of children under the age of 13 by requesting parental consent for the collection or use of any personal information of the users. COPPA was passed in response to a growing awareness of Internet marketing techniques that targeted children and collected their personal information from websites without any parental notification.
Featured Pages
Featured Agency Comments
EPIC's Comments to the FTC
EPIC's FTC Complaints
In re: Echometrix
EPIC's complaint alleges that Echometrix engages in unfair and deceptive trade practices by representing that the software protects children online while simultaneously collecting and disclosing information about children's online activity.
Documents
EPIC's Complaint
September 25, 2009
In re: Amazon.com
EPIC's complaint urged the FTC to investigate Amazon.com for violations of the Children's Online Privacy Protection Act (COPPA).
Documents
EPIC's Complaint
April 22, 2003
Additional Resources
Additional Topics
- The Drivers Privacy Protection Act (DPPA) and the Privacy of Your State Motor Vehicle Record
- Personal Surveillance Technologies
- Video Privacy Protection Act
- In re Nickelodeon Consumer Privacy Litigation
- Gun Owners' Privacy
- Theme Parks and Your Privacy
- The Drivers Privacy Protection Act (DPPA) and the Privacy of Your State Motor Vehicle Record
EPIC's Consumer Privacy Comments
Federal Trade Commission
- In re: Remedy Study (“Assessment of the FTC’s Prior Actions on Merger Review and Consumer Privacy”), Mar. 17, 2015
- In re Google Referrer Header Litigation, Jul. 31, 2014
- In re Snapchat, Jun. 9, 2014
- In the Matter of Apperian, Inc., et al. ("Safe Harbor comments"), Feb. 20, 2014
- In re Telemarketing Rulemaking, Apr. 10, 2002
- In the Matter of Microsoft Consent Order, Sept. 9, 2002
- In re Interagency Proposal to Consider Alternative Forms of Privacy Notices Under the Gramm-Leach-Bliley Act, Mar. 29, 2004
- In re Email Authentication Summit, Sept. 28, 2004
- In re 2010 Children's Online Privacy Protection Act Rule Review, July 9, 2010
- In re Google, Inc., May 2, 2011
- In re COPPA Rule Review, 16 CFR Part 312, Project No. P104503, Dec. 23, 2011
- In re Facebook, Inc., Dec. 27, 2011
- In re Face Facts: A Forum on Facial Recognition, Jan. 31, 2012
- In re Advertising and Privacy Disclosures in a Digital World, May 11, 2012
- In re Compete, Inc. (“Consumer Tracking Settlement”), Nov. 19, 2012
- In re Google, Inc., Feb. 22, 2013
- In re In Short: Advertising and Privacy Disclosures in a Digital World, July 11, 2012
- In re Myspace, LLC, June 8, 2012
- In re the Privacy and Security Implications of the Internet of Things, June 1, 2013
- Letter to FTC Chairwoman regarding the appointment of the Director of the Bureau of Consumer Protection, Mar. 19, 2013
- In re A Preliminary FTC Staff Report on "Protecting Consumer Privacy in an Era of Rapid Change: A Proposed Framework for Businesses and Policymakers", Feb 18, 2011
- In re Reed Elsevier, Inc. and Seisint, Inc. (jointly “LexisNexis”) Consent Order, Apr. 28, 2008
- In re CAN-SPAM Act Rulemaking (Do Not E-Mail), Mar. 31, 2004
- In re Public Workshop and Request for Public Comments and Participation, May 27, 2011
- In re DesignerWare, LLC et al., Oct. 25, 2012
Federal Communications Commission
- In re Inquiry Concerning High Speed Access to the Internet Over Cable and Other Facilities Proprietary Network Information, Internet Over Cable Declaratory Ruling, Appropriate Regulatory Treatment for Broadband Access to Internet Over Cable Facilities, June 18, 2002
- In re Digital Broadcast Copy Protection, Dec. 6, 2002
- In re Rules and Regulations Implementing the Telephone Consumer Protection Act of 1991, Dec. 9, 2002
- In re Rules and Regulations Implementing the Telephone Consumer Protection Act of 1991 (on a petition for declaratory ruling filed by the Fax Ban Coalition), Jan. 13, 2006
- In re Rules and Regulations Implementing the Telephone Consumer Protection Act of 1991 (on the implementation of the Junk Fax Prevention Act), Jan. 18, 2006
- In re Rules and Regulations Implementing the Telephone Consumer Protection Act of 1991 (on the notice of proposed rulemaking and the petition for declaratory ruling on the TCPA), July 29, 2005
- In re Telecommunications Carriers' Use Of Customer Proprietary Network Information, Nov. 1, 2001
- In re Rules and Regulations Implementing the Truth in Caller ID Act of 2009, 2011
- In re Privacy and Security of Information Stored on Mobile Communications Devices, July 13, 2012
- In the Matter of ACA International Petition for Expedited Clarification (exempting debt collectors from cell phone privacy rules), May 11, 2006
- In the Matter of Customer Proprietary Network Information, Apr. 14, 2006
- Letter to FCC Chairwoman regarding Verizon’s unlawful disclosure of customer proprietary network information to the NSA, June 11, 2013
Food and Drug Administration
- In re Consumer-Directed Promotion of Regulated Medical Products, October 11, 2005
Consumer Financial Protection Bureau
Department of the Treasury
- In re FACT Act Biometric Study in Identity Theft, Apr. 1, 2004
- In re Interagency Guidance on Response Programs for Unauthorized Access to Customer Information and Customer Notice, Oct. 14, 2003
Department of Commerce
- In re Multistakeholder Process to Develop Consumer Data Privacy Codes of Conduct, Apr. 2, 2012
- In re Information Privacy and Innovation in the Internet Economy, Jan. 25, 2011
- In re Development and Implementation of Cross-border Privacy Rules in the Asia Pacific Economic Cooperation Group (APEC), 2006
- In re Digital Entertainment and Rights Management, July 17, 2002
- In re Barriers to Electronic Commerce, Mar. 17, 2000
Office of Science and Technology Policy
-
In re Big Data and the Future of Privacy, Apr. 4, 2014
Office of the United States Trade Representative
Congress
- Testimony before the Senate Committee on Commerce, Science and Transportation, "Identity Theft and Data Broker Services", May 10, 2005
- Testimony before the House Committee and Energy and Commerce, Subcommittee on Commerce, Trade, and Consumer Protection, "H.R. 2221 the Data Accountability and Trust Act and H.R. 1319, the Informed P2P User Act", May 5, 2009
- Testimony before the Senate Committee on Banking, June 21, 2011
- Testimony before the House Committee and Energy and Commerce, Subcommittee on Commerce, Trade, and Consumer Protection, "The Discussion Draft of H.R.____, A Bill to Require Greater Protection for Sensitive Consumer Data and Timely Notification in Case of Breach", June 15, 2011
- Testimony before the House Ways and Means Subcommittee on Social Security, "Enhancing Social Security Number Privacy", June 15, 2004
- Testimony before the Senate Special Committee on Aging, "Identity Theft Involving Elderly Victims", July 18, 2002
- Testimony before the House Subcommittee on Oversight and Investigations Committee on Financial Services and Subcommittee on Social Security Committee on Ways and Means, "SSNs and Identity Theft", Nov 8, 2011
- Testimony before the House Subcommittee on Telecommunications and the Internet Committee on Energy and Commerce, "H.R. 5126, the Truth in Caller ID Act of 2006", May 18, 2006
State Agencies
- Maryland Attorney General: In re Credit Freeze, Nov. 21, 2005
- California Public Utility Commission: In re Proposed Policies and Findings Pertaining to the EISA Standard Regarding Smart Grid and Customer Privacy, Mar. 9, 2010
- California Public Utility Commission: In re Proposed Policies and Findings Pertaining to the EISA Standard Regarding Smart Grid and Customer Privacy, Apr. 7, 2010
- California Public Utility Commission: Proposed Decision Adopting Requirements for Smart Grid Deployment Plans Pursuant to Senate Bill 17, June 10, 2010
- Washington Utilities and Transportation Commission: In re Telecommunications Rulemaking, July 8, 2002
International
- Consumer Measures Committee of Canada: In re Identity Theft, Sept. 15, 2005
- Canadian Radio-television and Telecommunications Commission: In re Proceeding to establish a national do not call list framework and to review the telemarketing rules, Apr. 3, 2006
- European Parliament: Testimony before the Committee of the European Parliament on Civil Liberties, Justice, and Home Affairs, European Parliament, "The Reform of the EU Data Protection Framework- Building Trust in a Digital and Global World", Oct. 10, 2012
- The European Commission: In re the Processing of Personal Data on Data Protection Issues related to Intellectual Property Rights, Mar. 31, 2005
Consumer Privacy Resources
Media Coverage
- How much privacy are drivers willing to give up for better car insurance rates?, ABA Journal, April 4, 2016
- FCC Privacy Proposal Troubles Broadband Internet Providers, E-Commerce Times, March 30, 2016
- Feds tells app developers to warn consumers they spy, WND, March 26, 2016
- As FCC considers new broadband privacy rules, report urges wider user data safeguards, TechCrunch, March 23, 2016
- Privacy Group Pushes FCC For Tougher Restrictions On Online Data Collection, MediaPost, March 22, 2016
- Identity theft increasing at a staggering rate, News 4 San Antonio, March 17, 2016
- New privacy rules proposed for Internet service providers, Consumer Affairs, March 11, 2016
- What the FCC privacy push means for consumers, Internet providers, Christian Science Monitor: Passcode, March 11, 2016
- Privacy groups want rules for how ISPs can track their customers, PC World, March 8, 2016
- Consumer groups: FCC should not hold back on Internet privacy, The Hill, March 7, 2016
- Advocates Tell FCC To Fill ‘Void’ In Privacy Protection, Law360, March 7, 2016
- Privacy groups make follow-up FCC pitch, POLITICO Morning Tech, March 7, 2016
- Federal Efforts in Data Privacy Move Slowly, New York Times, February 29, 2016
- Billboard company taps cellphone data to learn about who sees its ads, Chicago Tribune, February 29, 2016
- LinkNYC's New Free Network Is Blazing Fast. But At What Cost to Privacy?, Motherboard, February 19, 2016
- Broadband Providers Urge FCC To Reject Tough Privacy Rules, MediaPost, February 12, 2016
- FCC Telemarketing Rule To Stem Flood Of Calls, DC Circ. Told, Law 360, January 26, 2016
- Internet providers want to know more about you than Google does, privacy groups say, Washington Post, January 20, 2016
- Consumer groups want FCC to curb targeted ads, ConsumerAffairs, January 20, 2016
- Consumer groups urge FCC to establish online privacy rules, SiliconBeat, January 20, 2016
- Key to Opting Out of Personalized Ads, Hidden in Plain View, New York Times, December 20, 2015
- 3rd Circ. Urged To Revive Google, Viacom Privacy Claims, Law 360, December 9, 2015
- Google's Gleaning of Children's Info Eyed by Third Circuit, Law.com, December 8, 2015
- Lenders may eye smartphone use before giving you a loan, Computerworld, December 4, 2015
- Natasha Singer and Mike Isaac, Uber Data Collection Changes Should Be Barred, Privacy Group Urges, New York Times (Jun. 22, 2015)
- Cyrus Farivar, FTC asked to block Uber from getting location data in background, Ars Technica (Jun. 22, 2015)
- Wendy Davis, Google's $8.5 Million Privacy Settlement Faces Appeal, MediaPost (May 4, 2015)
- Elizabeth Dworkin, FTC Delivers Mixed Warning on Location-Tracking, Wall Street Journal (Apr. 23, 2015)
- Elizabeth Weise, Is this the last hurrah for online freedom?, USA Today (Apr. 21, 2015)
- Loek Essers, How much should we allow Google, Facebook and others to tell us what to think?, PC World (Apr. 17, 2015)
- Larry M. Elkin, Shhh - Not In Front Of The Television, Palisades Hudson Financial Group (Apr. 17, 2015)
- Jess Bolluyt, How Snapchat Is Trying to Convince Users to Trust It, Tech Cheatsheet (Apr. 6, 2015)
- Snapchat’s Non-Vanishing Message: You Can Trust Us, Medium - Backchannel (Apr. 2, 2015)
- Tom Risen, RadioShack Sale Sparks Data Privacy Concerns, U.S. News & World Report (Mar. 28, 2015)
- Ashlee Kieler, Privacy Advocates Call For Investigation Into Samsung Smart TVs, Consumerist (Feb. 26, 2015)
- Nick Wingfield, Privacy Group Files F.T.C. Complaint Against Samsung’s Voice-Operated TVs,, New York Times (Feb. 25, 2015)
- Dan Tynan, What Are Schools Doing with Your Kids’ Data?, Yahoo Tech (Aug. 25, 2014)
- Brian Womack, Facebook Experiment Draws Complaint From Privacy Group, Bloomberg (Jul. 4, 2014)
- Brian R. Fitzgerald, Privacy Watchdog Files Complaint to FTC Over Facebook News-Feed Study, Wall Street Journal (Jul. 3, 2014)
- Jenna Wortham, Off the Record in a Chat App? Don’t Be Sure, New York Times (May. 8, 2014)
- Dominic Rushe, Regulators reprimand Snapchat over false claims about messaging service, The Guardian (May. 8, 2014)
- Hayley Tsukayama, FTC warns Facebook, WhatsApp: Keep your privacy promises, Washington Post (Apr. 10, 2014)
- Jessica Guynn, Privacy groups urge FTC to probe Facebook's deal to buy WhatsApp, Los Angeles Times (Mar. 6, 2014)
- Zachary Zagger, Scholarship Site Gives Info To Marketer, EPIC Tells FTC, Law360 (Dec. 13, 2013)
- Jon Blistein, Jay-Z's 'Magna Carta Holy Grail' App Under Investigation, Rolling Stone (Jul. 16, 2013)
- Rosa Golijan, Privacy group: Why does Jay-Z's app check who you call?, NBC News (Jul. 16, 2013)
- Avie Schneider, Big Brother Is In Your Pocket (But You Get A Discount), NPR (Dec. 7, 2012)
- Cecilia Kang, Privacy advocacy group files lawsuit to punish Google, Washington Post (Feb. 8, 2012)
- Wendy Davis, EPIC Challenges Verizon Wireless's New Privacy Policy Verizon, MediaPost (Nov. 1, 2011)
- Parental spyware sold kids' chats, CBC News (Dec. 1, 2010)
- Stephen Shankland, Privacy group files Buzz complaint with FTC, CNET (Feb. 17, 2010)
- Alexei Oreskovic, Facebook privacy backlash in FTC’s hands, Reuters (Dec. 18, 2009)
- Facebook Faces Criticism on Privacy Change, BBC News (Dec. 10, 2009)
- Brian Tarran, Privacy group logs FTC complaint over Echometrix, Research (Sep. 30, 2009)
- Jessica Vascellaro, Google Inquiry Sought Over Privacy Concerns, Wall Street Journal (Mar. 18, 2009)
- Miguel Helft, Privacy Group Asks F.T.C. to Investigate Google, New York Times (Mar. 17, 2009)
- Scott Carpenter, Federal Court Enjoins Sale of Keylogger Program, Proskauer Privacy Law Blog (Dec. 5, 2008)
- Ryan Singel, Court Halts Sale of DIY Spyware, Wired (Nov. 19, 2008)
- Jaikumar Vijayan, Privacy backers push FTC to end AskEraser service, Computerworld (Jan. 24, 2008)
- Elinor Mills, Group says Ask's privacy feature is flawed, CNET (Dec. 19, 2007)
- Ellen Nakashima, Privacy Group Objects To DoubleClick Deal, Washington Post (Apr. 20, 2007)
- Thomas Claburn, Privacy Groups Decry Google's Plans For DoubleClick, InformationWeek (Apr. 20, 2007)
- Tom Zeller, U.S. Settles With Company on Leak of Consumers' Data, New York Times (Jan. 27, 2006)
- Thomas Claburn, Private Phone Records Sold Online, Privacy Group Complains, InformationWeek (Aug. 30, 2005)
- Bob Sullivan, Experian Settles Free Credit Report Charges, NBC News (Aug. 16, 2005)
- Marketer of Free Credit Reports Settles FTC Charges, Federal Trade Commission (Aug. 16, 2005)
- Shefali Anand, Privacy Group Says Web Site Gets Records Illegally, Wall Street Journal (Jul. 8, 2005)
- Robert Gellman, ChoicePoint: Out of the Frying Pan . . ., Direct Marketing News (Apr. 8, 2005)
- JetBlue Hits Turbulence For Violating Customer Privacy Policy, InformationWeek (Sep. 23, 2003)
- Brian Dakss, JetBlue In Privacy Faux Pas, CBS News (Sep. 20, 2003)
- David McGuire, Complaint to FTC Says Amazon.com Violates Children's Privacy Law, Washington Post (Apr. 23, 2003)
- Groups Claim Amazon Violating Children's Privacy Law, USA Today (Apr. 23, 2003)
- Joris Evers, EPIC to protest Passport bundling with Windows XP, CNN (Jul. 26, 2001)
- Steve Lohr, Privacy Group Is Taking Issue With Microsoft, New York Times (Jul. 25, 2001)
More news
Share this page:
Support EPIC
EPIC relies on support from individual donors to pursue our work.
Subscribe to the EPIC Alert
The EPIC Alert is a biweekly newsletter highlighting emerging privacy issues.
EPIC Bookstore
The Future of Foreign Intelligence: Privacy and Surveillance in a Digital Age by Laura Donohue