Federal Trade Commission · Announced 2022-05-25

Twitter, Inc., $150,000,000

Twitter used phone numbers and email addresses collected for account security to target advertising, the same practice that was supposed to end under its 2011 FTC order.

Case identifiers

Respondent
Twitter, Inc.
Agency
Federal Trade Commission
Announced
2022-05-25
Monetary relief
$150,000,000
Case number
FTC Matter No. 202-3062
Statutes cited
FTC Act § 5 · Violation of 2011 FTC consent order

Key facts

  • 1

    Twitter collected phone numbers and email addresses from ~140 million users, telling them the information would be used for account security.

  • 2

    Twitter then used that same information to match users with advertisers for targeted ads.

  • 3

    $150 million civil penalty plus sweeping order requiring multi-factor authentication.

  • 4

    Second major FTC privacy order for Twitter, built on 2011 predecessor.

What the order requires

Injunctive terms imposed by the Federal Trade Commission. These bind Twitter, Inc.'s data practices going forward.

  • Prohibition on using phone numbers and emails collected for security to serve targeted ads.
  • Required notice to users about the unauthorized use.
  • Implementation of a privacy and information security program with external assessments.
  • Offer multi-factor authentication that does not require a phone number.

Primary sources

Read the original government documents. These are the authoritative records, everything on this page is derived from them.

Exercise your rights now

Generate a deletion request for $5

The FTC order binds Twitter, Inc.'s future practices, but doesn't automatically delete your existing data. State privacy law (CCPA, CPA, TDPSA, VCDPA) gives you that right. OfflistMe generates a compliant deletion email pre-addressed to Twitter, Inc.'s registered privacy contact.

Start for $5

FAQ

What did the FTC charge Twitter, Inc. with?+

Twitter used phone numbers and email addresses collected for account security to target advertising, the same practice that was supposed to end under its 2011 FTC order. The Federal Trade Commission cited FTC Act § 5, Violation of 2011 FTC consent order.

How much did Twitter, Inc. pay?+

Twitter, Inc. paid $150,000,000 in monetary relief, announced on 2022-05-25. The settlement also imposed injunctive terms (see below).

Does the Twitter, Inc. settlement mean my data has been deleted?+

No, the order does not automatically delete your data. You retain full rights under state privacy law (CCPA, CPA, TDPSA, VCDPA, and others) to submit your own deletion request. OfflistMe can generate a compliant deletion email pre-addressed to the respondent’s privacy contact.

How can I read the original FTC order?+

The Federal Trade Commission press release is available at https://www.ftc.gov/news-events/news/press-releases/2022/05/ftc-charges-twitter-deceptively-using-account-security-data-sell-targeted-ads. The case / matter number is FTC Matter No. 202-3062.

Related enforcement actions

Related