Lessons Learned From a Decade of FTC Privacy Enforcement

Lessons Learned From a Decade of FTC Privacy Enforcement

From She Said Privacy/He Said Security by Jodi and Justin Daniels

July 2, 2026 · 36 min

About this episode

Aaron Alva discusses lessons learned from a decade of FTC privacy enforcement and how companies can strengthen their privacy practices.

Aaron Alva is a Harvard Berkman Klein Center fellow and the Founder of Alva Strategy Center, advising organizations and enforcers on privacy, security, and AI governance. Previously, Aaron was a lead tech advisor at the FTC, where he was instrumental in driving the agency's approach to privacy and security enforcement. In this episode… Privacy risks often hide in how companies collect, use, and share personal information. Smart TVs, health-related websites, and location data have all drawn regulatory scrutiny when data is used in ways consumers did not reasonably expect. A decade of FTC privacy enforcement shows companies what regulators consider unfair or deceptive. So, what can companies learn from these cases to strengthen their privacy practices? Reducing privacy risk starts when companies understand the data they collect, where it goes, why it's being used, and whether that use is necessary in the first place. Companies should pay close attention to handling sensitive data with care, including health information, location data, children's and teens' data, and driver behavior data. Embedding stronger privacy practices often comes down to establishing clear purpose…

People in this episode

Hosts: Jodi Daniels, Justin Daniels

Guest: Aaron Alva

Topics covered

Keywords

Mentioned in this episode

Organizations: Harvard Berkman Klein Center, Alva Strategy Center, FTC

More episodes of She Said Privacy/He Said Security

Explore listener stats, chart rankings, contacts and more on the She Said Privacy/He Said Security podcast page.