Federal Trade Commission
Protects consumers and promotes competition
Key Regulations
Children's Online Privacy Protection Rule (COPPA)
Requires websites and apps to get parental consent before collecting personal information from children under 13.
CAN-SPAM Act Rules
Sets rules for commercial email including opt-out requirements and prohibitions on deceptive subject lines.
Telemarketing Sales Rule
Sets rules for telemarketing calls including time restrictions, disclosure requirements, and Do Not Call compliance.
Unfair or Deceptive Acts or Practices (Credit Practices Rule)
Bans unfair terms in consumer credit contracts and requires cosigners to be warned about their liability.
Health Breach Notification Rule
Requires health apps and personal health record companies to notify users when their health data is breached.
Enforcement Actions
FTC v. Facebook — Privacy Violations
Respondent: Facebook, Inc. (now Meta Platforms, Inc.)
The FTC imposed a record-breaking $5 billion penalty on Facebook for violating a 2012 consent order that required the company to protect users' privacy. The settlement resolved allegations that Facebo...
Outcome: $5 billion fine; restructured corporate governance; independent privacy oversight.
FTC v. Wyndham Worldwide — Data Security Failures
Respondent: Wyndham Worldwide Corporation
The FTC settled charges against Wyndham Worldwide after three data breaches between 2008 and 2010 compromised the payment card information of more than 619,000 consumers and led to more than $10.6 mil...
Outcome: Comprehensive security program required; 20 years of third-party audits; FTC authority upheld on appeal.
FTC v. Amazon — Dark Patterns in Prime Enrollment
Respondent: Amazon.com, Inc.
The FTC sued Amazon alleging that the company used manipulative user interface designs, known as dark patterns, to trick millions of consumers into enrolling in its Amazon Prime subscription service a...
Outcome: Litigation ongoing; seeking injunctive relief, civil penalties, and restitution.
FTC v. Equifax — Data Breach Settlement
Respondent: Equifax Inc.
Equifax agreed to pay at least $575 million—potentially up to $700 million—to settle charges related to its 2017 data breach, which exposed the personal information of approximately 147 million Americ...
Outcome: Up to $700M settlement; $425M consumer fund; 20 years of security assessments.
FTC v. Kellogg/Albertsons Merger Challenge
Respondent: Kroger Company and Albertsons Companies, Inc.
The FTC sued to block the proposed $24.6 billion merger of Kroger and Albertsons, the two largest supermarket chains in the United States. The FTC alleged that the merger would eliminate direct compet...
Outcome: FTC filed suit to block merger; litigation pending; divestiture plan challenged as inadequate.
FTC v. Match Group — Deceptive Use of Fake Profiles
Respondent: Match Group, Inc. (Match.com)
The FTC sued Match Group, the operator of Match.com, alleging that the company used fake love interest advertisements to trick consumers into purchasing paid subscriptions. According to the complaint,...
Outcome: Litigation resulted in settlement requiring refunds and business practice changes.
FTC v. Epic Games — Children's Privacy Violations (Fortnite)
Respondent: Epic Games, Inc.
The FTC imposed a record-breaking $520 million penalty on Epic Games, the maker of Fortnite, for violating children's privacy laws and using dark patterns to trick players into making purchases. The $...
Outcome: $520M total penalties; record COPPA fine; $245M in consumer refunds.
FTC v. Qualcomm — Anticompetitive Licensing Practices
Respondent: Qualcomm Incorporated
The FTC sued Qualcomm alleging that the semiconductor company used anticompetitive tactics to maintain its monopoly in the supply of certain baseband processors used in cell phones and other devices. ...
Outcome: District court ruled for FTC; reversed on appeal by Ninth Circuit; FTC declined further review.
FTC v. Frontier Communications — Internet Speed Deception
Respondent: Frontier Communications
The FTC sued Frontier Communications for failing to provide internet speeds advertised to customers in many areas it served. The complaint alleged that Frontier charged customers for internet service ...
Outcome: $8.5M settlement; required to stop advertising undeliverable speeds; customer restitution.