Business ProfileforEmpiriStat, Inc.

On 1/16/2020, the Federal Trade Commission ("FTC") reached finalized a Settlement with EmpiriStat, Inc. The Settlement resolves allegations that EmpiriStat, Inc. falsely claimed it was a current participant in the EU-U.S. Privacy Shield framework ("Privacy Shield") after allowing its certification to lapse in 2018. The Privacy Shield establishes a process to allow companies to transfer consumer data from European Union countries to the United States in compliance with EU law. In addition, the Settlement resolves allegations that EmpiriStat, Inc. falsely claimed it complied with the Privacy Shield principles when in fact it failed to verify that its published policy was accurate and completely implemented, an annual requirement under the framework. Finally, the Settlement resolves allegations that EmpiriStat, Inc. failed to abide by the Privacy Shield requirement that companies that stop participation in the framework affirm to the Department of Commerce that they will continue to apply the Privacy Shield protections to personal information collected while participating in the program.

As part of the Settlement with the FTC, EmpiriStat, Inc. is prohibited from misrepresenting the extent to which they participate in any privacy or data security program sponsored by the government or any self-regulatory or standard-setting organization and must comply with FTC reporting requirements. In addition, EmpiriStat, Inc. must also continue to apply the Privacy Shield protections to personal information it collected while participating in the program, or return or delete the information.

The Settlement should not be considered as an admission of guilt or finding of violation of the law. For more details, go to:
https://www.ftc.gov/news-events/press-releases/2020/01/ftc-finalizes-settlements-five-companies-related-privacy-shield?utm_source=govdelivery