X (Twitter) — Enforcement

The FTC fined Twitter $150 million for using phone numbers and email addresses collected for two-factor authentication to target users with advertising instead. From 2014–2019, over 140 million users were told their contact information was being collected for security purposes while it was simultaneously fed into Twitter's ad targeting system. This violated Twitter's 2011 FTC consent order. The new settlement required a comprehensive privacy program subject to independent auditing.