United States: Deregulation Is The New Buzzword In Washington — Except In The Tech Industry

Last Updated: January 23 2019
Article by Vejay Lalla and Vanessa Katz

The past year has been a volatile one, from trade wars to the government shutdown to a stock market dive. One constant that U.S. businesses have become accustomed to, however, is deregulation across a wide variety of industries — except for technology. As innovation in that sector continues at a rapid pace, regulators will continue to address consumer protection concerns. In addition, technology companies will continue facing more aggressive enforcement as well as increasingly complex regulation at both the federal and state levels.

In this article, we look at digital advertising disclosures, data privacy and internet-driven products — three areas in which regulatory oversight of tech companies has dramatically increased — and discuss what the industry is likely to face in the coming year.

The Influencer Economy

One area in which regulators and enforcement agencies have targeted the entire digital advertising ecosystem — including advertising agencies, publishers, game companies, technology networks, traditional brands and even individual talent — is influencer advertising disclosures.

Advertisers have expanded their partnerships with influencers in recent years, and analysts estimate that spending on influencer marketing could reach $10 billion by 2022. Social media and content platforms have also invested heavily in this sector. (Facebook, for example, launched a search engine in June 2018 called Brand Collabs Manager to enable brands and content creators to search for partners with similar audiences.)

The Federal Trade Commission is the primary federal agency that regulates endorsements and testimonials. The FTC has authority under Section 5 of the Federal Trade Commission Act to prevent "unfair" or "deceptive" business practices, which includes online advertising and sponsorships. As early as 2009, the FTC issued updated guidelines for endorsements and testimonials specifically to ensure that disclosures are properly made in social and digital channels. The FTC stressed the importance of ensuring that consumers understand they are being advertised to in new online channels, as opposed to watching a celebrity on television, where a consumer readily understands they are being pitched a product.

In 2015, the FTC weighed in further on native advertising disclosures to push for disclosures that would delineate the blurred lines between editorial and advertising in digital and social channels. In the Native Advertising Guidelines, it distinguished between traditional product integration you may see in games or television and similar placements online, stressing that "deceptive door openers" such as headlines and content that appear editorial in nature are inherently deceptive and lead to consumers interacting with advertising that they otherwise may not have chosen to consume. During the same period, the FTC has also brought numerous enforcement cases against agencies such as Deutsch LA and major advertisers such as Lord & Taylor, as well as influencer networks and content and game studios, for failing to ensure sponsored posts on social media and in editorial were adequately disclosed.

In the past two years, the FTC has significantly expanded its enforcement efforts. It has continued to pursue cases against advertisers and brands, and issued further concrete guidance in its Endorsement Guides as well. For example, it reached a settlement agreement with Creaxion in fall 2018 for paying athletes to promote a client's mosquito repellent. Creaxion reviewed and monitored promotional posts in advance, but did not require that the athletes disclose they were paid for their endorsements.

Since 2017, the FTC has also been enforcing sponsorship guidelines directly against influencers and content creators. In April 2017, the FTC sent over 90 warning letters to influencers and marketers related to disclosures of sponsored content or promotions on social media. That September, the FTC brought its first complaint directly against two influencers for falsely claiming that their reviews on social media were independent, and for failing to disclose their positions as owners and officers of the company they promoted, CSGO Lotto. The FTC has made it clear that all participants in the digital ecosystem are responsible for ensuring that advertising is clearly and conspicuously labeled.

We now see other agencies weighing in as well, most notably the U.S. Securities and Exchange Commission. In 2018, the SEC reached a settlement with professional boxer Floyd Mayweather Jr. and music producer Khaled Khaled (known as DJ Khaled). The SEC alleged that each individual promoted initial coin offerings on social media without disclosing that they received payments for their endorsements. Mayweather and Khaled paid over $300,000 and $100,000 respectively in connection with the settlement agreement.

Beyond expanded enforcement efforts by the FTC and SEC, influencers, media companies and brands also face — and will continue to face — increased pressure for self-regulation as well as scrutiny from the National Advertising Division, a division of the Better Business Bureau, on what constitutes sponsored content that requires disclosure. In one 2016 example, NAD investigated a partnership between People Magazine and the online shopping platform Joyus, and found that listing sponsored products and linking to sponsored content in People's "Stuff We Love" section was advertising rather than editorial content. NAD recommended that the magazine implement changes to include adequate disclosures on this sponsored content. In another example, NAD recently investigated a shopping guide on skincare products that included monetized affiliate links. NAD ultimately found that the shopping guide was not advertising and was therefore outside its jurisdiction, because the editors created content independently without any input from their marketing team or the listed retailers and brands. However, NAD left open the possibility that editorial content with affiliate links could be considered advertising under other circumstances.

Overall, as the influencer economy continues to evolve, regulators will have to grapple with new issues to ensure consumers are protected adequately in the online marketplace. One such example is how regulators will treat CGI influencers such as Shudu Gram and Miquela Sousa . Also, whether such influencer marketing is deceptive on its face or whether the reasonable consumer now simply expects to be advertised to in this manner, similar to a television commercial.

Data Privacy

The next area in which technology companies have experienced greater regulation at both the federal and state levels since 2016 — and will continue to need to make a top priority — is data privacy. Monetization and leverage of large consumer data repositories has become integral to corporate growth strategies across technology and other industries. Some analysts have called big data the "new oil."

Historically, the United States has regulated privacy by sector, with unique frameworks for different categories of sensitive data, such as health or financial information. Various state and federal agencies also have authority to pursue actions based on unfair or deceptive practices, like failing to disclose how a user's data is shared with third parties or sharing data in violation of a stated privacy policy. In the past two years, enforcement actions under existing laws have resulted in record-breaking penalties. This is the case not only in the United States but elsewhere as well, as enforcement of the EU's new regulations under the General Data Protection Regulation come into effect. Any company that collects or uses data from EU residents is subject to the GDPR, and U.S. companies with an EU presence now have additional risk exposure. This can even affect deals between U.S.-based companies, for example, as part of due diligence for potential acquisitions. In addition, large technology companies have come under heightened scrutiny by legislators, particularly in light of major security breaches and potential misuse of data.

Last fall, enforcement agencies reached record-breaking settlements related to data breaches. For example, Anthem agreed to pay $16 million for claims under the Health Insurance Portability and Accountability Act. The data breach underlying those claims resulted in over 78 million records compromised. In addition, a multi-state settlement agreement related to a failure to disclose a data breach required a $148 million payment. And the New York attorney general reached a $5 million settlement agreement for claims under the Children's Online Privacy Protection Act, the largest fine to date under that statute.

Technology companies also faced several highly publicized investigations into their data privacy practices by Congress and enforcement agencies in the past year. These actions have even taken place at the municipal level. The city attorney of Los Angeles, for instance, recently sued the Weather Channel for failing to disclose that location data collected through the company's mobile app may be used for commercial purposes like targeted marketing.

This past year, California passed a sweeping privacy law that adds significant disclosure and other compliance obligations for any company that collects consumer data. This law will come into effect in 2020 and will further increase regulatory exposure. Similar to the GDPR in Europe, California's new law broadly defines personal data to cover almost any information related to an identifiable individual, expands notice obligations for companies that collect user data and creates new rights for users to request access or deletion of their data. In addition, companies may face greater liability in private suits based on statutory damages under the new law.

In response to the increasing complexity of the regulatory landscape, major technology companies have begun to lobby for a federal privacy law. 2019 and 2020 will be key years for the development of further U.S. privacy regulations, and in determining how much control consumers will have over the ownership and right to manage their own personal data.

To handle both consumer expectations over the management of their data and increased regulatory scrutiny, technology companies will need to continue to adapt to this new environment. In addition, 'privacy by design' may become less of a catch phrase and more of a term requiring deeper integration by U.S. tech-enabled businesses. And with the rise of smart cities, states and cities themselves will have to understand how they are collecting or enabling the collection of data on their residents.

Connected Devices

As data privacy issues have drawn greater attention, regulators have increased scrutiny of connected devices. The market for internet of things devices has grown rapidly in the past two years, and analysts predict that it could grow to $520 billion by 2021. IoT devices pose unique security risks. They can collect sensitive data (e.g., security cameras) or be used for purposes that could pose a safety risk in the event of a breach (e.g., an automated vehicle or a traffic light). The FTC has pursued actions against device markers as early as its 2013 settlement agreement with TRENDnet, and published guidance on best practices for IoT device makers in a 2015 report, including security-by-design and transparency about data collected.

Until recently, the FTC advocated a "wait and see" approach to the IoT ecosystem. That said, since 2017, it has reached significant settlement agreements with IoT device makers, and new legislation at the state and federal level is targeting IoT devices. Furthermore, IoT device makers have faced enforcement actions related to data collection practices, and additional inquiries from lawmakers. A major TV manufacturer paid $2.2 million as part of settlement with the FTC and the State of New Jersey in 2017 based on claims that software pre-installed on "smart" televisions collected viewing data about 11 million users without their knowledge. In 2018, electronic toymaker VTech settled FTC claims under COPPA that a mobile app connected to its toys collected personal information from children without their parents' consent. And this past summer, several U.S. senators sent letters to device manufacturers and the FTC requesting that regulators investigate the business practices of makers of IoT devices with passive listening features.

IoT device makers must also comply with new guidance and legislation governing connected devices. For example, in September 2018, California passed the first law governing IoT devices. It requires that IoT device makers implement "reasonable security features" that are appropriate to the type of device and the nature of the data it processes. There are also sector-specific regulations and laws on the horizon for IoT device makers. For example, the Senate is considering a bill governing autonomous vehicles, the AV START Act, which will increase federal oversight of the testing and deployment of autonomous vehicles.

What to Expect this Year

U.S. businesses will continue to use data and technology as a means of creating efficiency and innovation in the marketplace. In fact, many of the largest technology companies are accelerating this process, expanding into new cities and hiring at a rapid pace. In certain areas of the tech sector — including digital advertising, connected devices and digital health — innovation is still in its early stages, but we will continue to see growing adoption of their products and services by both companies and consumers.

Although regulators are in catch-up mode, they are looking with an eye to the future, for example, by considering the imposition of trade restrictions on certain technologies, including artificial intelligence. The federal government will certainly continue to focus on the tech industry — both from a consumer protection perspective as well a fair trade perspective in regard to competition from China and others — but tech companies should also expect much more by way of state and local regulations in 2019, with California at the forefront.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

To print this article, all you need is to be registered on Mondaq.com.

Click to Login as an existing user or Register so you can print this article.

Events from this Firm
22 Oct 2019, Other, New York, United States

DLaw will be hosting a two-day summit on Disruptive Innovations in Legal Services providing a meaningful exploration of digital technology for the legal services professionals from specific emerging tools to new business models to creative client acquisition and retention strategies.

29 Oct 2019, Webinar, California, United States

In the digitized world of the twenty-first century, it is more important than ever for every organization to know as much as possible about the information it creates, stores, received and maintains.

14 Nov 2019, Other, California, United States

LinkedIn, Facebook, YouTube, Twitter, and other social networking sites offer lawyers myriad avenues for communicating with each other and the public about a host of issues.

In association with
Related Topics
Related Articles
Related Video
Up-coming Events Search
Font Size:
Mondaq on Twitter
Mondaq Free Registration
Gain access to Mondaq global archive of over 375,000 articles covering 200 countries with a personalised News Alert and automatic login on this device.
Mondaq News Alert (some suggested topics and region)
Select Topics
Registration (please scroll down to set your data preferences)

Mondaq Ltd requires you to register and provide information that personally identifies you, including your content preferences, for three primary purposes (full details of Mondaq’s use of your personal data can be found in our Privacy and Cookies Notice):

  • To allow you to personalize the Mondaq websites you are visiting to show content ("Content") relevant to your interests.
  • To enable features such as password reminder, news alerts, email a colleague, and linking from Mondaq (and its affiliate sites) to your website.
  • To produce demographic feedback for our content providers ("Contributors") who contribute Content for free for your use.

Mondaq hopes that our registered users will support us in maintaining our free to view business model by consenting to our use of your personal data as described below.

Mondaq has a "free to view" business model. Our services are paid for by Contributors in exchange for Mondaq providing them with access to information about who accesses their content. Once personal data is transferred to our Contributors they become a data controller of this personal data. They use it to measure the response that their articles are receiving, as a form of market research. They may also use it to provide Mondaq users with information about their products and services.

Details of each Contributor to which your personal data will be transferred is clearly stated within the Content that you access. For full details of how this Contributor will use your personal data, you should review the Contributor’s own Privacy Notice.

Please indicate your preference below:

Yes, I am happy to support Mondaq in maintaining its free to view business model by agreeing to allow Mondaq to share my personal data with Contributors whose Content I access
No, I do not want Mondaq to share my personal data with Contributors

Also please let us know whether you are happy to receive communications promoting products and services offered by Mondaq:

Yes, I am happy to received promotional communications from Mondaq
No, please do not send me promotional communications from Mondaq
Terms & Conditions

Mondaq.com (the Website) is owned and managed by Mondaq Ltd (Mondaq). Mondaq grants you a non-exclusive, revocable licence to access the Website and associated services, such as the Mondaq News Alerts (Services), subject to and in consideration of your compliance with the following terms and conditions of use (Terms). Your use of the Website and/or Services constitutes your agreement to the Terms. Mondaq may terminate your use of the Website and Services if you are in breach of these Terms or if Mondaq decides to terminate the licence granted hereunder for any reason whatsoever.

Use of www.mondaq.com

To Use Mondaq.com you must be: eighteen (18) years old or over; legally capable of entering into binding contracts; and not in any way prohibited by the applicable law to enter into these Terms in the jurisdiction which you are currently located.

You may use the Website as an unregistered user, however, you are required to register as a user if you wish to read the full text of the Content or to receive the Services.

You may not modify, publish, transmit, transfer or sell, reproduce, create derivative works from, distribute, perform, link, display, or in any way exploit any of the Content, in whole or in part, except as expressly permitted in these Terms or with the prior written consent of Mondaq. You may not use electronic or other means to extract details or information from the Content. Nor shall you extract information about users or Contributors in order to offer them any services or products.

In your use of the Website and/or Services you shall: comply with all applicable laws, regulations, directives and legislations which apply to your Use of the Website and/or Services in whatever country you are physically located including without limitation any and all consumer law, export control laws and regulations; provide to us true, correct and accurate information and promptly inform us in the event that any information that you have provided to us changes or becomes inaccurate; notify Mondaq immediately of any circumstances where you have reason to believe that any Intellectual Property Rights or any other rights of any third party may have been infringed; co-operate with reasonable security or other checks or requests for information made by Mondaq from time to time; and at all times be fully liable for the breach of any of these Terms by a third party using your login details to access the Website and/or Services

however, you shall not: do anything likely to impair, interfere with or damage or cause harm or distress to any persons, or the network; do anything that will infringe any Intellectual Property Rights or other rights of Mondaq or any third party; or use the Website, Services and/or Content otherwise than in accordance with these Terms; use any trade marks or service marks of Mondaq or the Contributors, or do anything which may be seen to take unfair advantage of the reputation and goodwill of Mondaq or the Contributors, or the Website, Services and/or Content.

Mondaq reserves the right, in its sole discretion, to take any action that it deems necessary and appropriate in the event it considers that there is a breach or threatened breach of the Terms.

Mondaq’s Rights and Obligations

Unless otherwise expressly set out to the contrary, nothing in these Terms shall serve to transfer from Mondaq to you, any Intellectual Property Rights owned by and/or licensed to Mondaq and all rights, title and interest in and to such Intellectual Property Rights will remain exclusively with Mondaq and/or its licensors.

Mondaq shall use its reasonable endeavours to make the Website and Services available to you at all times, but we cannot guarantee an uninterrupted and fault free service.

Mondaq reserves the right to make changes to the services and/or the Website or part thereof, from time to time, and we may add, remove, modify and/or vary any elements of features and functionalities of the Website or the services.

Mondaq also reserves the right from time to time to monitor your Use of the Website and/or services.


The Content is general information only. It is not intended to constitute legal advice or seek to be the complete and comprehensive statement of the law, nor is it intended to address your specific requirements or provide advice on which reliance should be placed. Mondaq and/or its Contributors and other suppliers make no representations about the suitability of the information contained in the Content for any purpose. All Content provided "as is" without warranty of any kind. Mondaq and/or its Contributors and other suppliers hereby exclude and disclaim all representations, warranties or guarantees with regard to the Content, including all implied warranties and conditions of merchantability, fitness for a particular purpose, title and non-infringement. To the maximum extent permitted by law, Mondaq expressly excludes all representations, warranties, obligations, and liabilities arising out of or in connection with all Content. In no event shall Mondaq and/or its respective suppliers be liable for any special, indirect or consequential damages or any damages whatsoever resulting from loss of use, data or profits, whether in an action of contract, negligence or other tortious action, arising out of or in connection with the use of the Content or performance of Mondaq’s Services.


Mondaq may alter or amend these Terms by amending them on the Website. By continuing to Use the Services and/or the Website after such amendment, you will be deemed to have accepted any amendment to these Terms.

These Terms shall be governed by and construed in accordance with the laws of England and Wales and you irrevocably submit to the exclusive jurisdiction of the courts of England and Wales to settle any dispute which may arise out of or in connection with these Terms. If you live outside the United Kingdom, English law shall apply only to the extent that English law shall not deprive you of any legal protection accorded in accordance with the law of the place where you are habitually resident ("Local Law"). In the event English law deprives you of any legal protection which is accorded to you under Local Law, then these terms shall be governed by Local Law and any dispute or claim arising out of or in connection with these Terms shall be subject to the non-exclusive jurisdiction of the courts where you are habitually resident.

You may print and keep a copy of these Terms, which form the entire agreement between you and Mondaq and supersede any other communications or advertising in respect of the Service and/or the Website.

No delay in exercising or non-exercise by you and/or Mondaq of any of its rights under or in connection with these Terms shall operate as a waiver or release of each of your or Mondaq’s right. Rather, any such waiver or release must be specifically granted in writing signed by the party granting it.

If any part of these Terms is held unenforceable, that part shall be enforced to the maximum extent permissible so as to give effect to the intent of the parties, and the Terms shall continue in full force and effect.

Mondaq shall not incur any liability to you on account of any loss or damage resulting from any delay or failure to perform all or any part of these Terms if such delay or failure is caused, in whole or in part, by events, occurrences, or causes beyond the control of Mondaq. Such events, occurrences or causes will include, without limitation, acts of God, strikes, lockouts, server and network failure, riots, acts of war, earthquakes, fire and explosions.

By clicking Register you state you have read and agree to our Terms and Conditions