Consumers Affected
650,000
The FTC proposed a consent order against Global Tel*Link Corp. for failing to secure sensitive user data, leading to a breach affecting nearly 650,000 consumers, and for delaying notification for about nine months. The order requires the company to implement a comprehensive security program, notify affected users with credit monitoring, and report future breaches promptly.
Global Tel*Link must implement a data security program with change management and multifactor authentication, notify all affected users from the breach and provide credit monitoring, notify consumers and facilities within 30 days of future breaches, report security incidents to the FTC within 10 days, and is prohibited from misrepresenting its security practices.
In-house legal teams should review all vendor and customer agreements, particularly those with telecommunications or communication service providers (like prison communications services), as well as any data processing agreements. Specific clauses to scrutinize include data security obligations, breach notification requirements (including timelines and scope of affected parties), data retention and disposal policies, and provisions related to cloud or third-party storage. Given the FTC's focus on inadequate safeguards and delayed notification, contracts may need amendments to mandate specific security controls (e.g., encryption, access logs), shorten breach notification windows (e.g., from months to days), require immediate notification to all affected individuals and business partners (like correctional facilities), and include audit rights or certification requirements for security programs.
Entity
Global Tel*Link Corp.
Also known as: Global Tel*Link
Industry
TelecommunicationsOfficial Press Release
https://www.ftc.gov/news-events/news/press-releases/2023/11/ftc-takes-action-against-global-tellink-corp-failing-adequately-secure-data-notify-consumers-after
Complaint GlobalTelLinkCorp
https://www.ftc.gov/system/files/ftc_gov/pdf/Complaint-GlobalTelLinkCorp.pdf
DecisionandOrder GlobalTelLinkCorp
https://www.ftc.gov/system/files/ftc_gov/pdf/DecisionandOrder-GlobalTelLinkCorp.pdf
Federal Trade Commission Enforcement Page
https://www.ftc.gov/enforcement
"Global Tel*Link Corp."
"failed to implement adequate security safeguards"
"waited approximately nine months to notify affected customers"
The FTC filed a complaint alleging that GovAssist LLC, Entry LLC, and Scott Zuckerman used deceptive paid search ads, misleading service and pricing claims, and fake reviews to deceive consumers seeking passport services. The complaint alleges violations of the FTC Act, the Impersonation Rule, and the Gramm-Leach-Bliley Act; the case will be decided by the court, and no penalty or remedy is reported as imposed.
The FTC issued its annual report to Congress describing fraud trends affecting older adults and the agency’s enforcement, education, and outreach efforts. The report is not a specific privacy enforcement action and announces no penalty or remedy.
The FTC referred a complaint against REPS & Company Inc. and company executives, alleging they bypassed ticket-issuer security controls and purchasing limits to acquire millions of tickets for resale. The complaint was filed by the Department of Justice, and the case will be decided by the court; the press release does not report a penalty or other remedy imposed.
$106.8M
A federal court entered a $106.8 million default judgment against corporate defendants in an alleged debt-relief scheme that impersonated banks and government entities and targeted seniors and veterans. The judgment permanently bans the defendants from the debt-relief industry and imposes additional prohibitions, including on impersonation, telemarketing, and misrepresentations.
The FTC sued Digital Forensics Corporation LLC and affiliated defendants, alleging they misled sextortion victims with promises of investigative and monitoring services that often were not provided, and used fake positive reviews. A federal court granted the FTC’s request to temporarily halt the defendants’ activities; the complaint remains for the court to decide.
The FTC alleged that Greenway Auto Group advertised vehicle prices thousands of dollars below the amounts consumers actually paid and used mailers falsely suggesting recipients had won cash prizes. Greenway agreed to an order requiring transparent pricing and prohibiting deceptive prize mailers and other misrepresentations; the press release does not state a monetary penalty.