Twitter Inc.

Twitter was fined $150 million for violating a 2011 FTC consent order by using phone numbers and email addresses that users had provided for two-factor authentication security purposes to deliver targeted advertising through its Tailored Audiences programme between 2014 and 2019. The FTC found Twitter had explicitly told users the data was collected solely for account security while simultaneously monetising it for advertising targeting. The settlement also required a comprehensive privacy and information security programme with independent biennial audits.