X Poses Serious Privacy Risk, Advocates Tell FTC

Privacy advocates are urging the Federal Trade Commission (FTC) to reject a recent bid by Elon Musk's X (formerly Twitter) to end ongoing audits of the platform's data handling practices. A July 2 deadline looms for public comments on the matter. X had argued that an FTC order was no longer necessary due to changes implemented by Musk. This order originated as a penalty after the FTC determined that a coding error had led to then-Twitter improperly sharing users' contact information, initially provided for two-factor authentication, for ad targeting purposes.

The existing FTC order subjects X to costly independent audits and grants the agency authority to request documents. This allows the FTC to verify compliance with data privacy laws without needing to initiate further legal action. Advocates contend that ending these audits would pose a "serious risk to Americans' privacy." They highlight that the platform's history of data mishandling, including the aforementioned contact information leak, necessitates continued oversight.

The FTC's initial investigation into the data sharing incident found that the error affected a significant number of users, though the exact figure was not specified in the public notice. The agency's ongoing audits are designed to ensure that X adheres to robust data protection measures and does not repeat past mistakes. Advocates believe that the current oversight is crucial for maintaining user trust and safeguarding sensitive personal information collected by the social media platform.

By allowing X to cease these audits, advocates argue, the FTC would be undermining its own mandate to protect consumers from unfair or deceptive practices related to data privacy. The call for continued scrutiny comes as social media platforms increasingly handle vast amounts of personal data, making robust regulatory oversight more critical than ever. The FTC's decision on X's request is anticipated to set a precedent for how the agency approaches data privacy compliance for major online platforms.