In separate complaints, the Federal Trade Commission (FTC) alleges that three companies – Decusoft, LLC, Tru Communication, Inc., and Md7, LLC, violated the FTC Act by falsely claiming that they were certified to participate in the EU-US Privacy Shield. Decusoft also has been accused of falsely claiming participation in the Swiss-U.S. Privacy Shield framework. The actions against the companies are the first cases the FTC has brought to enforce the EU-U.S. Privacy Shield framework, which is aimed at providing companies on both sides of the Atlantic with a mechanism to comply with EU data protection requirements when transferring consumer data. As part of their settlements, each company is prohibited from misrepresenting the extent to which they participate in any privacy or data security program sponsored by the government and must comply with FTC reporting requirements.
