Chegg avoids fine in deal with FTC over cybersecurity lapses
By 
Aaron Nicodemus2022-10-31T17:25:00
The Federal Trade Commission (FTC) ordered education technology provider Chegg to fix problems and weaknesses with its cybersecurity program that led to the exposure of personal and financial data of 40 million customers in four data breaches since 2017.
In agreeing to the order, Chegg promised to “bolster its data security, limit the data the company can collect and retain, offer users multifactor authentication to secure their accounts, and allow users to access and delete their data,” the FTC said Monday in a press release.
Chegg neither admitted nor denied any of the allegations in the FTC complaint, except as specifically stated in the decision, according to the FTC’s order.
THIS IS MEMBERS-ONLY CONTENT
You are not logged in and do not have access to members-only content.
If you are already a registered user or a member, SIGN IN now.
Related articles
-
OpinionWhen AI Is Forced on Compliance: The ECCP as your Guide
When a company rapidly adopts AI, compliance officers can be blindsided, tasked with governance almost immediately. Luckily, there is a guide from the U.S. Department of Justice to help.
-
ArticleOpenAI’s Nicole Diaz: AI is “the new frontier of product liability”
At Compliance Week’s recent Artificial Intelligence and Compliance event, one message came through clearly: Companies are moving quickly to adopt AI, while compliance programs are still trying to catch up.
-
ArticleFINRA executive explains regulator's use of AI at Compliance Week event
The Financial Industry Regulatory Authority (FINRA) has welcomed artificial intelligence (AI) with open arms—and also caution.
More from Regulatory Enforcement
-
ArticleFrench investigators target anticompetitive practices in largest accounting firms
Major accountancy firms in France are under investigation for anti-competitive practices. The French competition watchdog embarked on a series of “unannounced inspections” and removed documents relating to audit and reporting on Jan. 13.
-
ArticleEU investigation into Grok may expose problems with DSA rather than compliance failings
The European Commission has launched a formal investigation against Elon Musk’s X under the Digital Services Act over fears that its AI tool Grok may be producing and disseminating illegal material.
-
ArticleFormer ADM execs inflated operating profits, SEC alleges
Three former executives at Archer-Daniels-Midland intentionally misled investors by inflating the performance of the company’s Nutrition unit, the U.S. Securities and Exchange Commission has alleged.