Bloomberg Law: Privacy & Data Security brings you single-source access to the expertise of Bloomberg Law’s privacy and data security editorial team, contributing practitioners,...
The Eleventh Circuit vacated an FTC order that medical testing company LabMD Inc. rev up its data security program, ruling that the order lacked specifics and was unenforceable.
The Federal Trade Commission’s cease and desist order “mandates a complete overhaul of LabMD’s data-security program and says precious little about how this is to be accomplished,” the court wrote. “This is a scheme that Congress could not have envisioned.”
The protracted case has been a closely watched challenge to the agency’s authority to regulate data security practices under Section 5 of the FTC Act, which prohibits unfair and deceptive trade practices (LabMD, Inc. v. FTC, 11th Cir., No. 16-16270-D, 6/6/18).
The three-judge panel of the U.S. Court of Appeals for the Eleventh Circuit did not rule on the FTC’s Section 5 data security authority, confining the decision to the cease and desist order.
“Although we are disappointed by the appeals court’s ruling, we will continue to do everything we can to protect consumer privacy. We are evaluating our next steps in response to this decision,” an FTC spokesperson said in a June 6 email.
“We are gratified by and applaud today’s decision by the Eleventh Circuit, which confirms LabMD’s position that the order entered against LabMD by the FTC was fundamentally unlawful,” Douglas H. Meal, a partner with Ropes & Gray who represents LabMD, told Bloomberg BNA in an email.
The case started after the FTC said in a complaint that LabMD violated Section 5 by failing to provide reasonable and appropriate security for patient information. LabMD, which is now defunct, argued that the FTC did not have the authority under Section 5 to regulate its data security practices.
Eventually, the FTC found that LabMD lacked reasonable security on its computer network, needed to protect consumer sensitive data, in violation of Section 5. The agency ordered the company to employ reasonable security practices that complied with FTC standards of reasonableness, the court wrote.
LabMD argued that an FTC cease and desist order was “unenforceable because it does not direct LabMD to cease committing an unfair act or practice within the meaning of” Section 5, according to the decision. The court agreed.
The decision was written by Judge Gerald Bard Tjoflat and joined by Judge Charles R. Wilson and Judge Eduardo C. Robreno of the U.S. District Court for the Eastern District of Pennsylvania, sitting by designation.
Ropes & Gray LLP represented LabMD.
All Bloomberg BNA treatises are available on standing order, which ensures you will always receive the most current edition of the book or supplement of the title you have ordered from Bloomberg BNA’s book division. As soon as a new supplement or edition is published (usually annually) for a title you’ve previously purchased and requested to be placed on standing order, we’ll ship it to you to review for 30 days without any obligation. During this period, you can either (a) honor the invoice and receive a 5% discount (in addition to any other discounts you may qualify for) off the then-current price of the update, plus shipping and handling or (b) return the book(s), in which case, your invoice will be cancelled upon receipt of the book(s). Call us for a prepaid UPS label for your return. It’s as simple and easy as that. Most importantly, standing orders mean you will never have to worry about the timeliness of the information you’re relying on. And, you may discontinue standing orders at any time by contacting us at 1.800.960.1220 or by sending an email to email@example.com.
Put me on standing order at a 5% discount off list price of all future updates, in addition to any other discounts I may quality for. (Returnable within 30 days.)
Notify me when updates are available (No standing order will be created).
This Bloomberg BNA report is available on standing order, which ensures you will all receive the latest edition. This report is updated annually and we will send you the latest edition once it has been published. By signing up for standing order you will never have to worry about the timeliness of the information you need. And, you may discontinue standing orders at any time by contacting us at 1.800.372.1033, option 5, or by sending us an email to firstname.lastname@example.org.
Put me on standing order
Notify me when new releases are available (no standing order will be created)