Chegg avoids fine in deal with FTC over cybersecurity lapses
By 
Aaron Nicodemus2022-10-31T17:25:00
The Federal Trade Commission (FTC) ordered education technology provider Chegg to fix problems and weaknesses with its cybersecurity program that led to the exposure of personal and financial data of 40 million customers in four data breaches since 2017.
In agreeing to the order, Chegg promised to “bolster its data security, limit the data the company can collect and retain, offer users multifactor authentication to secure their accounts, and allow users to access and delete their data,” the FTC said Monday in a press release.
Chegg neither admitted nor denied any of the allegations in the FTC complaint, except as specifically stated in the decision, according to the FTC’s order.
THIS IS MEMBERS-ONLY CONTENT
You are not logged in and do not have access to members-only content.
If you are already a registered user or a member, SIGN IN now.
Related articles
-
ArticleThe dos and don’ts of responding to a World Bank integrity audit
The World Bank Group has updated its “Integrity Compliance Guidelines” for the first time in 15 years, and at a time when sanctions cases are on the rise. These developments combined should prompt companies to reassess their anti-corruption compliance practices.
-
ArticleLong-running corruption scandal adds €25.8M fine to billions already paid globally
The Netherlands Public Prosecution Office has fined a company linked to a U.S.-sanctioned Israeli businessman €25.8 million ($29.9 million) for bribing officials in the Congo. The case began in 2018 and relates to bribes paid in 2010-2011, demonstrating the slow and complex process often involved in such investigations.
-
ArticleBoA settles class-action related to its dealings with Jeffrey Epstein
Bank of America has agreed to settle a class-action lawsuit alleging know-your-customer and other failings in its dealings with convicted sex offender Jeffrey Epstein.
More from Regulatory Enforcement
-
News BriefSEC’s Uyeda: ‘Enforcement is the wrong way’ to handle off-channel communications
The U.S. Securities and Exchange Commission’s Mark Uyeda told an audience of investment advisers that the SEC will no longer prioritize stand-alone enforcement actions for violations of the SEC’s rules on off-channel communications.
-
News BriefAdobe agrees to $150M settlement over alleged cancellation fee violations
Adobe agreed to a $150 million settlement with the U.S. Department of Justice over accusations that it concealed software termination fees and made it difficult for customers to cancel.
-
ArticleU.K. competition regulator ‘very likely’ to use new enforcement powers despite government’s pro-growth agenda
New powers granted to the U.K.’s main competition watchdog will result in greater scrutiny, tougher enforcement, and a stark warning for companies to review their sales and marketing promotions—especially since some practices have been pushed firmly into the spotlight thanks to legislation that came into effect last year.