LifeLock Allegedly Violated FTC Settlement

The Federal Trade Commission asserted Tuesday that LifeLock violated a 2010 settlement with the agency and 35 state attorneys general by continuing to make deceptive claims about its identity theft protection services and by failing to take steps required to protect its users’ data.

Shares of LifeLock dropped nearly 48% late Tuesday after the action against the company was announced.

In documents filed with the U.S. District Court for the District of Arizona, the FTC charged that LifeLock failed to live up to its obligations under the 2010 settlement, and asked the court to impose an order requiring LifeLock to provide full redress to all consumers affected by the company’s order violations.

The 2010 settlement stemmed from FTC allegations that LifeLock used false claims to promote its identity theft protection services. The settlement barred the company and its principals from making any further deceptive claims; required LifeLock to take more stringent measures to safeguard the personal information it collects from customers; and required LifeLock to pay $12 million for consumer refunds.

“It is essential that companies live up to their obligations under orders obtained by the FTC,” said Jessica Rich, Director of the FTC’s Bureau of Consumer Protection. “If a company continues with practices that violate orders and harm consumers, we will act.”

The FTC charged Tuesday that in spite of these promises, from at least October 2012 through March 2014, LifeLock violated the 2010 settlement by: 1) failing to establish and maintain a comprehensive information security program to protect its users’ sensitive personal data, including credit card, social security, and bank account numbers; 2) falsely advertising that it protected consumers’ sensitive data with the same high-level safeguards as financial institutions; and 3) failing to meet the 2010 order’s record-keeping requirements.

The FTC asserts that from at least January 2012 through December 2014, LifeLock falsely claimed it protected consumers’ identity by providing alerts as soon as it received any indication there was a problem.

Details of the FTC’s action against the company were filed under seal. The court will determine which portions of the case will be unsealed.    

For reprint and licensing requests for this article, click here.
Consumer banking Debt collection
MORE FROM AMERICAN BANKER