FTC fines Twitter $150M for using 2FA phone numbers for ad targeting
if your first thought is that the fine isn’t enough, often these fines go along with agreements to change business practices. in this case:<p>>In addition to imposing a $150 million civil penalty for violating the 2011 order, the new order adds more provisions to protect consumers in the future:<p>>Twitter is prohibited from using the phone numbers and email addresses it illegally collected to serve ads.<p>>Twitter must notify users about its improper use of phone numbers and email addresses, tell them about the FTC law enforcement action, and explain how they can turn off personalized ads and review their multi-factor authentication settings.<p>>Twitter must provide multi-factor authentication options that don’t require people to provide a phone number.<p>>Twitter must implement an enhanced privacy program and a beefed-up information security program that includes multiple new provisions spelled out in the order, get privacy and security assessments by an independent third party approved by the FTC, and report privacy or security incidents to the FTC within 30 days.