Public Comments

WPF advises FTC regarding privacy frameworks and knowledge governance; files key comments

The World Privacy Forum has submitted a set of key comments to the US Federal Trade Commission regarding privacy frameworks and governance. The comments introduce the idea of knowledge governance and propose frameworks that will work to solve the serious privacy challenges we face in complex data ecosystems.

FTC announces expanded settlement with Uber, WPF comments included

The FTC finalized an expanded settlement with Uber, Inc. regarding the company’s data security practices. According to the FTC complaint, in the midst of the Commission’s original investigation, Uber experienced a second serious breach and waited more than a year after learning of the breach before informing the public or the Commission. The World Privacy Forum

WPF Comments: Access to the CFPB consumer complaint database is vital to understanding and analyzing identity theft in the US

WPF has urged the CFPB to continue to maintain its consumer complaint database and make complaints available to the public. The CFPB is considering multiple potential changes to its consumer complaint database, including reducing access, among other potential changes. In its comments, WPF explained how CFPB consumer complaint data has been vital to our ability to

WPF comments on the DHS External Biometric Records database

The World Privacy Forum has submitted detailed comments on the US Department of Homeland Security’s External Biometric Records database (EBR database), which DHS describes as a large biometric and demographic database drawn from foreign and domestic sources. WPF has a number of concerns about the proposal, including that the EBR database is slated to be exempted from

Public Comments: WPF comments on proposed revised consent decree re: Uber; requests FTC to hold workshop to determine standards for privacy assessments

In comments to the FTC regarding a proposed revised consent decree with Uber Technologies, Inc., WPF urged the FTC to clarify what the term “assessment” means in the context of a consent decree with a company. The comments note that the requirement for an assessment is not the same as the requirement for an audit.