X (Twitter) — Enforcement

Executive Summary

The FTC finalized a consent decree barring Twitter for 20 years from misleading consumers about the security of their personal information. Twitter was required to implement a comprehensive information security program subject to independent audits every two years. The order stemmed from the 2009 breaches that exposed administrative controls over all user accounts.