- Created on Friday, 23 May 2014 11:53
- Written by Lesley Fair - FTC
Washington, DC - So a company is going great guns and collects massive amounts of personal information from consumers with the express promise it won’t share it with third parties. Stuff happens and the company finds itself in Bankruptcy Court.
If you followed the FTC action in Toysmart or read the letters regarding Borders and XY Magazine, you’re already wondering what effect bankruptcy will have on those promises. A letter from Jessica Rich, Director of the FTC’s Bureau of Consumer Protection, to a U.S. Bankruptcy Judge in New York underscores the importance of consumers’ privacy interests.
Educational technology company ConnectEDU has a website with career planning tools for students, parents, and counselors. More than 20 million students have registered – along with 5,000 education institutions and 140,000 employers. Students have built personal listings to showcase their academic interests, used the resume builder, and networked with potential mentors and bosses.
In the process, ConnectEDU has collected a mountain of data from users: names, home and email addresses, dates of birth, phone numbers, the works. Add to that the student records from high schoosl and community colleges that contracted with ConnectEDU.
In amassing all that information, the company made certain promises to users: “[T]he personally identifiable data you submit to ConnectEDU (or that ConnectEDU obtains from your school) is not made available or distributed to third parties, except with your express consent and at your direction.” Furthermore, “the Company will not give, sell or provide access to your personal information to any company, individual or organization for its used in marketing or commercial solicitation or for any other purpose, except as is necessary for the operation of the site.”
What if the company is sold at some point in the future? ConnectEDU thought about that, too, and told people “In the event of sale or intended sale of the Company, ConnectEDU will give users reasonable notice and an opportunity to remove personally identifiable data from the service.” Well, that about covers it.
Privacy mavens and bankruptcy gurus: Read the letter to find out more.