FTC Emphasis on Online Dark Patterns
For the past year, the FTC has focused extensively on dark patterns, which are generally described as online interfaces that manipulate consumers into making decisions they would not otherwise make or that lead to consumers sharing more data than they intended. The contours of what constitutes a dark pattern that violates the law are not particularly well-defined and a September 2022 FTC report on the topic did not provide real clarity. Two recent FTC law enforcement actions do shed some light on what practices the FTC finds deceptive or unfair. In one case, the FTC settled for $100 million and alleged that a company made it easy for consumers to sign up for services but difficult to cancel through the use of dark patterns. In a $3 million settlement in a different matter, the agency alleged that, through dark patterns, a company falsely represented to consumers that they had been preapproved for certain credit offerings. The focus on dark patterns continues in 2023.
FTC Focus on Health and Geo Data
For decades the FTC has focused on the privacy of health data and has also focused a good deal on the privacy of location data. As noted previously, the FTC has focused even more on these issues since the Dobbs decision and will continue to do so. Shortly after the decision was announced, the FTC’s then-acting associate director of the Division of Privacy & Identity Protection announced in a blog post that websites sharing health, location, and highly sensitive data without adequate disclosures to consumers would “hear from” the FTC. A recent case, which for the first time alleged a violation of the agency’s Health Breach Notification Rule, also claimed that the company unlawfully shared health data with third-party advertisers. And in a case currently in litigation, the FTC alleged that the company unlawfully shared consumer geo data with third parties, which could be used to trace individuals to sensitive locations.