Back to X (Twitter)

X (Twitter)Enforcement

majorAnti-PrivacyEnforcement

Executive Summary

The FTC fined Twitter $150 million for using phone numbers and email addresses collected for two-factor authentication to target users with advertising instead. From 2014–2019, over 140 million users were told their contact information was being collected for security purposes while it was simultaneously fed into Twitter's ad targeting system. This violated Twitter's 2011 FTC consent order. The new settlement required a comprehensive privacy program subject to independent auditing.

What Happened

On May 25, 2022, the FTC and DOJ announced that Twitter would pay a $150 million fine for violating a 2011 FTC consent order. From 2014 to 2019, Twitter collected phone numbers and email addresses from users under the pretense of account security, such as two-factor authentication and password resets, but then used this information to sell targeted advertising. The settlement requires Twitter to implement a comprehensive privacy program subject to independent audits and to stop profiting from deceptively collected data.

Who Is Affected

More than 140 million Twitter users who provided their phone numbers and email addresses for security purposes were affected. These users were told their contact information would be used to secure their accounts, unlock accounts blocked due to suspicious activity, and reset passwords, but this data was simultaneously used for advertising targeting without their knowledge or consent.

Why It Matters

This enforcement action demonstrates that companies can face significant financial penalties for misusing data collected under security pretenses, even years after the violation. The case reinforces that when platforms promise to use personal information for specific security purposes, using that data for commercial advertising constitutes illegal deception under FTC authority. The violation of an existing 2011 consent order resulted in enhanced penalties and oversight requirements.

AI-Assisted

Event summaries are generated by Claude AI from verified sources and reviewed by humans before publication.

The FTC fined Twitter $150 million for using phone numbers and email addresses... — X (Twitter) | PrivacyWire