US Safe Web Act is Enacted
Apr. 5, 2007 - During its final week in session, the 109th Congress passed a measure that aims to enable the Federal Trade Commission (“FTC”) to be more effective in protecting consumers from spam, spyware, and Internet fraud on a global scale. The Undertaking Spam, Spyware, And Fraud Enforcement With Enforcers Beyond Borders Act of 2006 (the “US SAFE WEB Act”) empowers the FTC to share confidential information and investigational assistance with counterpart agencies in foreign countries. Just before the end of 2006, the President signed the measure into law. The key provisions of the measure are summarized below:
Key Provisions:
Expansion of Information Sharing and Investigation: The measure will allow to the FTC to share confidential information regarding consumer protection matters with foreign law enforcers, subject to the receipt of adequate confidentiality assurances. This new FTC authority is similar to the authority presently possessed by other US agencies and authorities, and, arguably, is needed to allow the FTC to share information with foreign agencies to help them halt fraud, deception, spam, spyware and other consumer protection law violations targeting consumers in the United States.
Expanding Investigative Cooperation: The bill will allow the FTC to conduct and participate in investigations and discovery designed to assist foreign law enforcers in appropriate cases.
Obtaining More Information from Foreign Sources: The measure will also allow the FTC to protect information provided by foreign enforcement agencies from public disclosure, where confidentiality protection was imposed as a condition of disclosure of such information by the applicable foreign agency.
Protecting the Confidentiality of FTC Investigations: The measure contains provisions that would safeguard FTC investigations in a defined range of cases. More specifically, it will (i) generally protect recipients of Commission Civil Investigation Demand (each, a “CID”) from possible liability for keeping those CIDs confidential; (ii) authorize the Commission to seek a court order in appropriate cases to preclude notice by the CID recipient to the investigative target for a limited time; and (iii) tailor the mechanisms available to the Commission to seek delay of notification currently required by the Right to Financial Privacy Act (“RFPA”) or the Electronic Communications Privacy Act (“ECPA”), to better fit FTC cases.
Protecting Certain Entities Reporting Suspected Violations of Law: This provision protects a limited category of appropriate entities from liability for voluntary disclosures to the FTC about suspected fraud or deception, or about recovery of assets for consumer redress.
Allowing Information Sharing with Federal Financial and Market Regulators: The measure adds the FTC to RFPA’s list of financial and market regulators allowed to readily share appropriate information.
Confirming the FTC’s Remedial Authority in Cross-Border Cases: The bill expressly confirms: (i) the FTC’s authority to redress harm in the United States caused by foreign wrongdoers and harm abroad caused by U.S. wrongdoers; and (ii) the availability, in cross-border cases of all remedies available to the FTC, including restitution.
Enhancing Cooperation Between the FTC and DOJ in Foreign Litigation: The measure permits the FTC to cooperate with the DOJ in connection with foreign litigation of FTC matters.
Clarification of FTC Authority to Make Criminal Referrals: The law expressly authorizes the FTC to make criminal referrals for prosecution when violations of FTC law also violate U.S. criminal laws.
Providing for Foreign Staff Exchange Programs: The bill authorizes foreign staff exchange arrangements between the FTC and associated with foreign government authorities. It also permits the FTC to accept reimbursement for its costs associated with these arrangements.
Authorizing Expenditure on Joint Projects: The measure authorizes the FTC to expend appropriated funds, not to exceed $100,000 annually, toward operating expenses and other costs of cooperative cross-border law enforcement projects and bilateral and multilateral meetings.
Gift Acceptance: Interestingly, the measure authorizes the FTC to accept reimbursement for providing assistance to law enforcement agencies in the U.S. or abroad, and to accept gifts and voluntary services in aid of the agency’s mission and consistent with ethical constraints.
Addressing Expressed Concerns: A previous bill, titled the International Consumer Protection Act of 2003 (S.1234), similarly attempted to expand the powers of the FTC to share information about cross-border fraud but was criticized by privacy advocates. Critics contended that provisions in the bill that reduced privacy safeguards, limited government oversight, and diminished legal safeguards should be removed.
The US SAFE WEB Act appears to have addressed some of these concerns. In the area of governmental oversight, it is interesting to note that the bill requires a detailed report to Congress within three years of its passage. The U.S. SAFE WEB Act also removed a provision which exempted information or material voluntarily provided relevant to possible unfair or deceptive acts or practices from the disclosure requirements of the Freedom of Information Act (“FOIA”). The receipt of foreign information remains exempt from FOIA disclosure.
A Sign of Things to Come? Many observers have speculated that, with the political shift in Congress, we will see enhanced legislative focus on prior issues in the coming years. The new year is already off to an contemplative start in this regard. The same day that President Bush signed to US SAFE WEB Act into law, he also signed the Veterans Benefits, Health Care and Information Technology Act of 2006. This act is a comprehensive measure, which among other key provisions, directs the Veterans Affairs Department to notify veterans promptly in the case of a data breach and to provide fraud alerts, data breach analysis, reports to Congress, credit monitoring and identity theft insurance.
Right to Privacy Advances in the UK with Resolution of McKennitt Case
-
ABOUT
Jacqueline Klosek, Senior Counsel in the Business Law Department of Goodwin Procter LLP, is a frequent author and commentator on data privacy and security. You can email her at jacquelineklosek@gmail.com -
BOOKS
