A bipartisan coalition of 41 attorneys general, led by Illinois Attorney General Kwame Raoul, sent a letter to Meta Platforms Inc. calling for improved data security practices to protect users from account takeovers by scammers. The coalition cites a dramatic increase in account takeover complaints and urges Meta to increase staffing, implement multi-factor authentication, and take stronger enforcement actions against scammers.
In-house legal teams should review vendor, customer, and data processing agreements, focusing on clauses related to data security, account protection, authentication, complaint handling, and enforcement. Specific clauses to examine include data security standards, account takeover mitigation measures, multi-factor authentication requirements, complaint resolution procedures, and policies for addressing fraudulent activities. Based on the coalition's demands, contracts may need amendments to mandate increased staffing for incident response, implement robust authentication protocols, specify stronger enforcement actions against scammers, and ensure timely breach notifications. Additionally, data processing addendums should be updated to reflect enhanced security obligations and user account safeguards.
Entity
Meta Platforms Inc.
Also known as: Meta
Industry
Social MediaOfficial Press Release
https://illinoisattorneygeneral.gov/news/story/attorney-general-raoul-co-leads-bipartisan-coalition-calling-on-meta-to-protect-users-accounts-from-being-hijacked-by-scammers
Multistate Letter on Account Takovers Ltrhd FINAL
https://ilag-dev.dotcms.cloud/dA/a27b76ad-9837-4138-a1a9-f65951fcf92e/fileAsset/Multistate%20Letter%20on%20Account%20Takovers_Ltrhd_FINAL.pdf
Illinois Attorney General Enforcement Page
https://www.illinoisattorneygeneral.gov/consumer-protection/
"Meta Platforms Inc. (Meta)"
"account takeovers by scammers"
"March 06, 2024"
"Attorney General Kwame Raoul"
"sending a letter"
"bipartisan coalition of 41 attorneys general"
Illinois Attorney General Kwame Raoul, joined by 16 other attorneys general, filed a lawsuit against the U.S. Department of Education to stop new data collection requirements under IPEDS that threaten student privacy by requesting sensitive personal information including income, test scores, and GPA.
Attorney General Raoul secured a court order preventing the U.S. Department of Agriculture from collecting SNAP applicants' and recipients' personal data without an agreed-upon protocol that restricts sharing with unrelated entities like the Department of Homeland Security. The court found that the USDA's proposed protocol would violate federal law by allowing data use for immigration enforcement, contrary to the intended purpose of SNAP.
A coalition of 18 state attorneys general, led by Illinois AG Kwame Raoul, filed a lawsuit against the Trump administration to stop a policy that grants Elon Musk and DOGE unauthorized access to the Treasury Department's payment system, which contains sensitive personal information like bank details and Social Security numbers. The lawsuit seeks an injunction and a declaration that the policy is unlawful, arguing it violates federal law and jeopardizes data security.