#Sponsored or #Deceptive? Understanding the FTC’s Rule on Influencer Ads

By: Penny Pathanaporn

Introduction

Have you ever noticed the endless stream of brand endorsements flooding your social media feed? Maybe you’d never even considered buying that gadget or outfit, but after watching a few influencer hauls and product reviews, you suddenly find yourself engaging in overconsumption. 

While endorsement content may be enticing enough to make you click “add to cart,” they also raise important questions: just how truthful—and lawful—are these advertisements? To answer that question, we must examine the legislation that governs marketing practices, as enforced by the Federal Trade Commission (FTC).

Legal Framework and FTC Authority 

Under Section 5 of the Federal Trade Commission Act (15 USC 45), commercial entities are prohibited from engaging in ‘‘unfair or deceptive acts or practices . . . .’’ According to the Federal Trade Commission (FTC), a practice is considered deceptive if three elements are met: (1) there is “a representation, omission or practice that is likely to mislead the consumer,” (2) the representation, omission or practice is directed toward a “consumer [who is] acting reasonably,” and (3) the representation, omission, or practice is likely to impact the consumer’s decision regarding the product. 

 In an effort to further regulate deceptive marketing practices, the FTC implemented a new rule on August 14, 2024: the Trade Regulation Rule on the Use of Consumer Reviews and Testimonials. Under this new rule, commercial entities are prohibited from, among other practices, “selling or purchasing fake consumer reviews or testimonials, buying positive or negative consumer reviews . . . [, and] creating a company-controlled review website that falsely purports to provide independent reviews . . . .” In addition, the rule bars “insiders [from] creating consumer reviews or testimonials without clearly disclosing their relationships.” 

Given how readily traditional advertising has evolved into influencer marketing, it is no surprise that the FTC introduced this rule to directly address the shift in modern-day promotional tactics.

Revolve Class Action Lawsuit

Within the last month or so, Revolve—a fashion retailer—has been hit with a $50 million dollar class action lawsuit. The plaintiffs allege that Revolve’s marketing practices do not comply with Section 5 of the Federal Trade Commission Act (15 USC 45). In the lawsuit, the plaintiffs claim that Revolve allowed influencers to promote its products on social media without disclosing that these endorsements were paid partnerships, or that the influencers had preexisting relationships with the brand. The plaintiffs further claim that this marketing approach misled consumers into making purchases they might have reconsidered if they had known about the true nature of the endorsements.

Shein Class Action Lawsuit 

Similar to Revolve, Shein–a fast fashion retailer with a global online presence—was recently named in a class action lawsuit alleging violations of the Federal Trade Commission Act. The plaintiffs allege that Shein paid influencers to endorse their products on social media without clearly disclosing their financial relationships. 

According to the lawsuit, Shein allegedly depended on these influencers to portray themselves as regular shoppers or genuine supporters of the brand. This marketing strategy allegedly involved concealing sponsorship disclosures within hashtag-heavy captions or leaving the disclosures out altogether. Like the plaintiffs in the Revolve lawsuit, the plaintiffs here assert that they would have reconsidered their Shein purchases had they been aware of the true nature of the endorsements.  

FTC Guidance: What Brands and Businesses Can Do to Prevent Liability 

In direct response to the rise in influencer marketing, the FTC has published guidelines on how brands and influencers can collaborate while ensuring compliance with U.S. consumer protection laws. Per the guidelines, the FTC advises influencers to always “disclose when [they] have any financial, employment, personal, or family relationship with a brand.” This means that, whether the influencer was paid to promote the brand or merely gifted free products, the influencer must still make the appropriate disclosures to remain legally compliant. 

In regard to disclosure placements, the FTC emphasizes that disclosures should be easily noticeable by consumers. For example, the FTC discourages placing the disclosures within a list of hashtags or links; instead, disclosures should appear directly alongside the message of endorsement. For video content, the FTC recommends including disclosures in the video itself in addition to the accompanying caption. As for language, disclosures should be written in clear and simple terms—ranging from direct acknowledgments of brand partnerships to shorter hashtags like “#sponsored” or “#ad.”

Lastly, it is crucial for brands and influencers alike to understand that, although brand endorsements may be published abroad, U.S. consumer protection laws will still apply if it is “reasonably foreseeable that the post will affect U.S. consumers.” 

Conclusion

Influencer marketing represents a modern form of advertising—one that is both highly accessible and incredibly personal, blurring the line between genuine content and paid promotion. Left unchecked, influencer marketing—which involves consistent and personal engagement with consumers—can easily lead to negative impacts on consumption. The FTC’s new rule and guidelines help protect consumer rights while giving companies and influencers the freedom to develop their brands, honor their creativity, and grow their businesses.

#FTC #SocialMediaMarketing #AdDisclosure #WJLTA

Administrative Agencies & Their Role in Technological Regulation

By: Chi Kim

On January 7, 2023, Kevin McCarthy became Speaker of the House after his colleagues from the House of Representatives held fifteen separate voting sessions. The House demonstrated an equally impressive and depressing feat given the inability of our current elected officials to achieve results for even seemingly mundane decisions. While many liberal observers may have rejoiced at the chaos, the fifteen votes is emblematic of an overall trend of inefficiency within the legislative branch and political processes, especially when tackling more fluid concepts and problems within the technology sector. Creating regulations requires large amounts of information, lobbying, and time to convince policymakers with inflexible positions and procedures around fluid and emerging technologies of the merits of the proposed regulations. In addition to the typical policy lag, the timeline for proposed technological regulations are further exacerbated by the following intrinsic and extrinsic factors. 

Intrinsically, Congress is not equipped to handle technological regulation by design. Although our most recent Congress is younger than its predecessor by one year, this small change alone is a historical anomaly. The 118th Congress is the third oldest since 1789 and generally has been climbing since the early 1980s.The average ages in the Senate and House are 63.9 and 57.5, respectively. While this could be the result of modern medical advancements, the increasing age of our elected officials bodes negatively for the hope that our policymakers will understand the technology that they are regulating. Remember, for instance, the famous Facebook hearings? Even the generally unpopular Mark Zuckerberg looked relatable when forced into the position of explaining a new technology to an older person. Beyond the general lack of subject matter expertise, congressional officials cannot invest the requisite time to learn about these issues while also tackling persistent issues within voting rights legislation, labor and supply chain constraints from international pressures, and a looming recession creeping closer layoff by layoff. 

Extrinsically, big tech still has a massive voice within our congressional chambers. During the 2020 election cycle fifteen major tech companies, including Amazon, Facebook, Google, Microsoft, Oracle, and others, spent $96.3 million to influence forthcoming bills like the National Defense Authorization Act, Fairness for High Skilled Immigrants Act, and the CHIPS for America Act. While Congress receives input from stakeholders, there is often a cost to frame their political positions. 

Despite our political gridlock, the American government is not completely unarmed against big tech. In political law, hydraulics is the concept that political energy is never destroyed but rather manifests into new forms, finding new gaps and openings within the regulatory or political landscape, much like water does on earth. In the context of the technological landscape, the responsibility of passing regulations has flowed to administrative bodies. The Federal Trade Commission (FTC), for example, influences technology policy in a number of different ways. The FTC recently filed a lawsuit against data broker Kochava Inc. for selling geolocation data from millions of mobile devices. If the FTC is successful, such a ruling would likely affect the overall data broker industry. Notably, the FTC leadership impacts the policy direction advanced by the agency. For FTC Commissioner, President Biden appointed Alvaro Bedoya, who previously served as the founding director of the Center on Privacy and Technology at Georgetown Law Center where he worked at the intersection of privacy and civil rights. Additionally, as of the writing of this article, the FTC is accepting public comments for a proposed rule to ban non-compete clauses. This rule is intended to increase worker earnings and create more competition among big tech. While administrative agencies do have their own procedural “policy lags,” the FTC can still actively tackle issues while receiving input from internal and external industry experts without being directly tainted by lobbying efforts. 

Law and technology are often portrayed as incompatible ideas — rising technology  meeting archaic regulations. However, policymakers need to realize that law and technology are not so different — both policymaking and technology development require troubleshooting and reiterations over time. However, unlike the software engineers in the companies that they regulate, policymakers do not have endless opportunities to sandbox their regulations before fully staking their political careers and capital. The responsibility of making such regulations has often flowed to administrative agencies that can take measured steps on the daunting task of regulating big tech companies. However, Congress should build on administrative agency efforts by passing bills based on the failures or successes of the agency actions. Doing so could result in more relevant and long-lasting technology regulations. 

The FTC Takes on Health and Fitness Apps’ Rampant Privacy Problems

By: Laura Ames

More and more Americans are turning to mobile health and fitness applications, but many worry about the lack of regulations would ensure that developers of these products keep user information secure and private. The Federal Trade Commission (“FTC”) recently addressed this concern with a policy statement (“Statement”) including app developers among the entities who must follow certain notification procedures after security breaches. However, many question the Statement’s practical effects and whether the FTC had the authority to issue it.  

Health App Trends

Mobile health and fitness apps have gained popularity in recent years, and the COVID-19 pandemic only accelerated this growth. In fact, the United States led the world in health and fitness app downloads as of October 2020 with 238,330,727 downloads that year alone. Even with this increased usage, a recent poll showed that over 60% of U.S. adults felt at least somewhat concerned regarding the privacy of their health information on mobile apps. These worries appear to be well-founded. Flo Health Inc., the developer of a menstrual cycle and fertility-tracking app, currently faces a consolidated class action alleging the company disclosed users’ health information to third parties without users’ knowledge. This is not an isolated concern. A recent study of over 20,000 health and fitness apps found that a third of these apps could collect user email addresses and more than a third transmitted user data to third parties such as advertisers.

The Original Health Breach Notification Rule

Congress enacted the Health Information Technology for Economic and Clinical Health (“HITECH”) Act as an investment in American health care technology. Subtitle D of this Act delegated authority to the FTC to promulgate breach notification requirements for breaches of unsecured protected health information. In 2009, the FTC issued its Health Breach Notification Rule (“HBNR”) covering vendors of personal health records (“PHR”) and PHR-related entities who experienced a security breach. The HBNR requires these entities to notify affected individuals and the FTC. Crucially, the HITECH Act defines a PHR as an electronic record that can be drawn from multiple sources.

The FTC has never enforced the HBNR, but the possibility for changes to the rule has been on the horizon for some time. In 2020, the FTC requested public comments on the HBNR, which functions as a part of their rulemaking process, saying that it was merely a periodic review of the rule. However, before that comment period ended, the Commission issued a policy statement that turned heads.

The FTC Makes a Bold Move

On September 15, the FTC issued a statement with two of the five Commissioners dissenting. The FTC’s stated goal was to clarify the HBNR and put entities on notice of their security breach obligations. The FTC explained that the HBNR is triggered when “vendors of personal health records that contain individually identifiable health information created or received by health care providers” experience a security breach. The first major revelation was that the FTC considers developers of health apps or connected devices as health care providers because they provide health care services or supplies.

Additionally, the FTC stated that it interprets the rule as covering apps that are capable of drawing information from multiple sources, like through a combination of consumer inputs and application programming interfaces (“APIs”). The statement gave two examples of apps that are covered under this understanding. First, an app that collects information directly from users and has the capacity to draw information through an API that enables syncing with a user’s fitness tracker. Second, an app is implicated if it draws information from multiple sources even if the health information only comes from one source. For example, if a consumer uses a blood sugar monitoring app that draws health data only from that consumer’s inputs but also draws non-health data from the phone’s calendar, that app is covered by the HBNR.

Additionally, the FTC sought to remind entities that a breach is not limited to cybersecurity intrusions but also includes unauthorized access to information. Under this interpretation, companies that share information without a user’s authorization would also be subject to the Rule. Although the FTC had not previously enforced the Rule, this Statement also served as signaling the FTC’s willingness to do so. It mentions that businesses could face potential civil penalties of $43,792 per violation per day.

Obviously, these clarifications could subject many app developers and other companies to the FTC’s rule. However, in the eyes of some, including the two dissenting Commissioners, this statement is not a mere clarification but a fundamental policy change. It could not only lead to potential confusion but could also be a breach of the FTC’s statutory authority and rulemaking process.

Critiques and Larger Questions

Some legal experts argue that this statement represents an expansion of the HBNR that could lead to further confusion for app companies and others. The two dissenting FTC Commissioners go further than potential confusion in their statements.

Commissioner Christine S. Wilson argued that this Statement both short-circuits the FTC’s rulemaking process and also improperly increases its statutory authority by expanding the definitions of terms without legislative approval. Commissioner Noah Joshua Phillips agreed that this statement’s first problem is its issuance in the middle of a request for public comment. Wilson pointed out that the FTC’s own business guidance for dealing with the HBNR directly contradicted the statement by saying that “if consumers can simply input their own” health data on a business’ site, for example, a weekly weight input, then the business is not covered by this rule. Wilson also expressed concerns that this interpretation of “health care provider” was a potentially slippery slope. For instance, does Amazon qualify as a health care provider given that users can purchase Band-Aids and other medical supplies through its phone app?

In the coming months, we might see the FTC forcing app developers to notify customers of data disclosures, but the debate around this statement also reveals larger questions concerning health care at the moment. Fundamental questions that once might have seemed easy to answer, such as who qualifies as a health care provider, are growing murkier. In the wake of COVID-19’s effects on telehealth and health technology in general, it seems unlikely that health care will phase out of this continued intermingling with technology. If that is the case, then legislation and regulations surrounding health care will continue to have to scramble to catch up with this rapid technological evolution.

Prove It or Lose It: The FTC’s Standard for Scientific Support of Medical App Claims

Medical-Apps-in-HealthcareBy Julie Liu

Among the countless mobile applications that allow us to control much of our lives, the growing wave of medical apps allows us to manage and improve our health with the convenience of a phone or tablet. But, as illustrated by the Federal Trade Commission’s approval of its final order against the maker of the UltimEyes app, this possibility comes with important limitations. Continue reading

Five Stars for the Recent Crackdown on Fake Reviews

fakeBy Alex Bullock

Think of the last time you were in the market for a product or to find a restaurant for dinner – did you search online for reviews of the product or the business? If you’re like me and many other modern consumers, the answer is likely, “Yes.” And again, if you’re like me, you may take for granted that those online reviews are objective and real. That is why it is encouraging to hear that a company like Amazon, as well as the Federal Trade Commission (FTC), are taking steps to ensure that consumers can trust those reviews.

In October, Amazon filed suit against more than 1,000 people who allegedly offered to write reviews of products they had not used in exchange for a fee. According to the company’s complaint in King County Superior Court, each of the individuals sued in this case used the website Fiverr, a global online marketplace for individuals offering tasks and services in order to offer to create fake reviews for a fee. The complaint outlines a typical encounter between an Amazon seller and a prospective fake reviewer. Continue reading