Tannenbaum Helpern Syracuse & Hirschtritt, LLP
About Us Careers Contact Us Search
Home Practice Areas Industries Case Results Attorneys Publications Events Press Room

Directors and Officers Beware: Your Company’s Violations of Privacy Laws May Cost You Personally

Click here to download PDF

Both federal and state lawmakers and regulators have demonstrated an increasing interest in enforcement data privacy and cybersecurity laws. Companies that violate these laws and regulations may suffer significant fines, intrusive oversight by governmental authorities, reputational harm, and litigation by third parties.

However, directors and officers should not assume that companies themselves will be the only ones that may ultimately held responsible. An extraordinary statement issued on February 27, 2019 by two Federal Trade Commission (FTC) commissioners, in connection with a multi-million dollar fine it recently imposed, suggests that the FTC may soon begin holding individual directors and officers accountable for their companies’ violations of privacy laws.

On February 27, the FTC announced a settlement with Musical.ly (now known as TikTok), a company that operates a popular video social networking application. Under the settlement, TikTok agreed to pay a $5.7 million fine to settle the FTC’s allegations that it violated the Children's Online Privacy Protection Act (COPPA). COPPA requires operators of websites or online services that are directed to children to obtain verifiable parental consent before collecting personal information from children under age 13.

The company’s app allows users to create short videos in which they lip-sync to music, and to share those videos with other users. According to the FTC, the company was aware that a significant percentage of its users were children under age 13. However, the company failed to seek parental consent before collecting the names, email addresses and other personal information from those children. In addition, user accounts were public by default, which meant that a child’s username, picture and videos could be seen by other users. The FTC alleged that although TikTok allowed users to change their default setting from “public” to “private,” users’ profile pictures and biographical information continued to remain public, and users could still send direct messages to children. The FTC also alleged that the company failed to comply with parents’ requests to delete information about underage children and held onto it longer than necessary.

The $5.7 million fine against TikTok is the largest that has ever been imposed for violations of COPPA, and comes on the heels of a nearly $5 million COPPA fine that the New York State Attorney General’s Office imposed on Oath, Inc. (f/k/a AOL) in December 2018. The settlements with TikTok and Oath (as well as several other recent fines for COPPA violations) highlight that federal and state regulators continue to take enforcement of data privacy laws very seriously.

The TikTok settlement is noteworthy not only for the fine’s record-breaking amount, but also for a written statement that two FTC commissioners issued contemporaneously with that settlement. In that statement, FTC Commissioners Rohit Chopra and Rebecca Kelly Slaughter expressed an interest for aggressive enforcement against individual directors and officers of companies that violate the law. In their statement, the commissioners wrote:

“FTC investigations typically focus on individual accountability only in certain circumstances — and the effect has been that individuals at large companies have often avoided scrutiny. We should move away from this approach. Executives of big companies who call the shots as companies break the law should be held accountable.

When any company appears to have a made a business decision to violate or disregard the law, the Commission should identify and investigate those individuals who made or ratified that decision and evaluate whether to charge them. As we continue to pursue violations of law, we should prioritize uncovering the role of corporate officers and directors and hold accountable everyone who broke the law.”

Directors and officers of companies that collect, use, sell or otherwise process personal data of individuals should ensure that their companies’ privacy policies and practices comply with the law. The new appetite for holding individual executives personally accountable for their company’s privacy law violations makes it ever more important to ensure compliance.

If you have any questions on the issues addressed in this article, contact Micheal J. Riela at riela@thsh.com, any member of our Cybersecurity and Data Privacy practice or your regular contact at Tannenbaum Helpern.

David R. Lallouz

212.702.3142

lallouz@thsh.com

Andre R. Jaglom

212.508.6740

jaglom@thsh.com

Beth Smigel

212.702.3176

smigel@thsh.com

Michael J. Riela

212.508.6773

riela@thsh.com

Maryann C. Stallone

212.508.6741

stallone@thsh.com

Vincent J. Syracuse

212.508.6722

syracuse@thsh.com

About Tannenbaum Helpern Syracuse & Hirschtritt LLP

Since 1978, Tannenbaum Helpern Syracuse & Hirschtritt LLP has combined a powerful mix of insight, creativity, industry knowledge, senior talent and transaction proficiency to successfully guide clients through periods of challenge and opportunity. Our mission is to deliver the highest quality legal services in a practical and efficient manner, bringing to bear the judgment, common sense and expertise of well trained, business minded lawyers. Through our commitment to service and successful results, Tannenbaum Helpern continues to earn the loyalty of our clients and a reputation for excellence. For more information, visit www.thsh.com. Follow us on LinkedIn and Twitter: @THSHLAW.



Publications
BulletPoint
GlobalNote
Business Litigation Bulletin
Employment Notes
Note from the Real Estate Group
THSH E-Alert
Other Publications
Inclement Weather Policy
Other Publications Archive
President Obama Seeks to Broaden Overtime Protections for Employees
Privacy regulation in the United States
The Broad Scope of Franchise Laws: Traps for the Distribution Contract Drafter
Managing Distribution: How to Develop a Corporate Legal Compliance Program
Internet Distribution, E-Commerce and Other Computer Related Issues
Distribution Contracts
What Impact Will FATCA Have on Offshore Hedge Funds and How Should Such Funds Prepare for FATCA Compliance?
The American Taxpayer Relief Act of 2012: What It Means to You
Privilege and the In-House Counsel: Protecting Your Communications Through Proper Registration and Careful Understanding
Are your digital communications protected by attorney-client privilege and what if privileged information is disclosed?
THSH Private Equity Roundtable Summary
Post Grant Review Under the America Invents Act
Bench-Bar Conversation with Justice Carolyn E. Demarest
Proposed Changes Set to Alter Estate and Gift Tax Structure in New York: Time to Make a Gift?
New York City Paid Sick Leave – What Staffing Firms Need to Know
New York State Estate and Gift Tax: The Hidden Costs of Tax Reform
Assessing Never-Examined SEC-Registered Investment Advisers: An SEC NEP Priority
Changes to NY Minimum Wage
NLRB Strikes Again
Bench-Bar Conversations with Justice Elizabeth Emerson
Attorney Professionalism Forum: What should an attorney do when the client wants to present false information and what happens
Reducing the risk of violating competition law
NY Rings in 2015 with a Minimum Wage Increase
Distribution & Agency 2015 - Q&A on the distribution of goods and services in 17 jurisdictions worldwide
Fair Chance Act
Sales Taxes on Construction Projects
Forget Big Brother, What Happens When it’s Opposing Counsel is Doing the Recording?
E-Discovery Identification & Preservation Guide For Lawyers (Version 2.0)
On the Horizon: What to do before selling your staffing business
Striking the Right Encryption Balance after FBI, Apple Fracas
Delaware Court Reiterates Need for Unambiguous Non-Reliance Provisions in M&A Agreements
Finalizing a Divorce? Wait, Just One More Thing …
IRS Proposed Changes to IRC 2704 Affect Business Succession and Estate Planning Valuation Discounts
Trump and the Estate Tax: What We Know
Actual-Intent Fraudulent Transfers and the Crime/Fraud Exception
Proposed NYS DFS Cybersecurity Regulations to Significantly Impact FS Companies
New Guidance for Human Resource Professionals to Avoid Antitrust Violations
Merger and Scènes à Faire: Two Defenses to Substantial Similarity in Copyright Litigation
What’s New in the Revised New York State Proposed Cybersecurity Regulation?
The Law of Insider Trading: A Primer For Investment Managers
Recent Cyber Attack On Law Firms Serves As A Wake-Up Call For Professional Services Firms
The Ambac Decision and the Future of the Common Interest Privilege Under the New York Law
Overview of Data Privacy and Cybersecurity Regulatory Landscape for Investment Advisers and Other Financial Services Companies
Global Ransomware Attack: Basic Security Measures Every Business Should Adopt
Distribution & Agency 2017- Q&A on the distribution of goods and services in 17 jurisdictions worldwide
New Copyright of Resource: Copyright Protection
Attorney Professionalism Forum: Using Per Diem Attorneys Plus An Addendum To The June Forum On Cybersecurity Ethics
Congressional Republicans Propose Sweeping Tax Reform
Attorney Professionalism Forum: Attorney-Client Confidentiality vs. the Customs Agent: Who Wins?
Attorney Professionalism Forum: Confidentiality Issues When Clients Don’t Tell The Truth
Rules for Equity Crowdfunding Effective May 16, 2016
Estate Planning Under Comprehensive Tax Reform
Attorney Professionalism Forum: Attorney Websites, Branding and Using Social Media
Attorney Professionalism Forum: Attorney Advertising And Self Promotion
NY Appellate Court Shifts Balance of Power in Commercial Real Estate Leases: Upholds Yellowstone Injunction Waiver
Recent Developments in Neighbor Litigation
Attorney Professionalism Forum: Communicating With Clients With Diminished Capacity
Attorney Professionalism Forum: Litigation Financing
Groundbreaking bipartisan Congressional Legislation could pave the way to fully legalized Marijuana
Conditions Precedents in Construction Contracts
Distribution & Agency 2018 - Q&A on the distribution of goods and services in 18 jurisdictions worldwide
Data Privacy Alert: California Consumer Privacy Act of 2018 Just Enacted
Attorney Professionalism Forum: Litigation Financing Confidentiality and Marijuana Ethics For Lawyers
U.S. Markets See First Cannabis IPO
NYS Department of Financial Services Issues Guidance to Banks on Servicing the Marijuana Industry
THSH Cyber Alert: GoDaddy the latest to leave S3 Bucket Unsecured
Legalized Adult-Use Marijuana Coming to New York?
NYS and NYC Sexual Harassment Prevention Laws
Are Your Website and Privacy Policy GDPR Compliant?
Attorney Professionalism Forum: Ethics and Best Practices For Law School Clinics
Beware of the AIA Form of Performance Bond
Attorney Professionalism Forum: Referral Fees and Using a Client as an Expert
Anecdotes from World’s Largest B2B Cannabis Conference
Attorney Professionalism Forum: Restrictive Covenants In Agreements Employing Lawyers
Turndown Service with that Hack: Marriott Hotels Announce Massive Data Breach
Attorney Professionalism Forum: Handling Confidential Client Information
Groundbreaking 2018 Farm Bill Portends Huge Changes to U.S. Cannabis and Hemp Industries
Attorney Professionalism Forum: The Challenges of Litigating Against Pro Se Parties
Articles By Topic
HRMinute
New York Law Journal
Attorney Professionalism Forum
Join Our Mailing List
Publication
Like us on FaceBook Follow us on Twitter Get LinkedIn with us Pin It! Email Us Print this Page

Sitemap |Terms of Use | Privacy | Attorney Advertising

Tannenbaum Helpern Syracuse & Hirschtritt LLP provides legal advice only to individuals or entities with which it has established an attorney-client relationship and such advice is based on the particular facts and circumstances of each matter. Contacting us through this site, or otherwise, will not establish an attorney-client relationship with us. Any e-mail or other communication sent to THSH or its lawyers through this site will not be treated as subject to the attorney-client privilege or as otherwise confidential and you should not include any confidential information in any such communication.