LabMD challenges FTC data security action in new lawsuit

The medical lab files a new lawsuit seeking to rein in the FTC's authority to bring data breach complaints

By , IDG News Service |  IT Management

Atlanta cancer-screening laboratory LabMD has stepped up its challenge of the U.S. Federal Trade Commission's authority to enforce data security standards by filing a lawsuit against the agency.

LabMD on Thursday filed the lawsuit and a motion for a preliminary injunction asking the U.S. District Court for the Northern District of Georgia to suspend the FTC's enforcement action against the lab for two alleged data breaches.

The FTC, in an enforcement action filed in August, accused LabMD of a 2012 data beach affecting 500 customers and a 2008 breach in which a company spreadsheet contained sensitive personal information for more than 9,000 consumers was found on a peer-to-peer network. An FTC representative didn't immediately respond to a request for comments on the LabMD lawsuit.

LabMD's court challenge, if successful, could have a huge impact on data security practices in the U.S. Since 2000, the FTC has held that it has authority under the unfair business practices provisions in section 5 of FTC Act to bring enforcement actions against companies that have data breaches, when they don't use what the agency considers adequate data protection practices. LabMD contends that the U.S. Congress hasn't given the agency the authority to enforce data security standards.

"Congress has enacted numerous other targeted, narrowly tailored data-security statutes ... which are enforced by other agencies," LabMD's lawyers wrote in their request for an injunction. "These specific grants of jurisdiction control and trump the FTC's recently claimed general Section 5 'unfairness' data-security jurisdiction."

LabMD is one of two companies that have challenged the FTC's data security enforcement authority in the past year. Hotel operator Wyndham Worldwide has also filed a lawsuit against the FTC after the agency accused it of allowing three breaches, in 2008 and 2009, that led to millions of dollars in fraud losses.

LabMD closed in January and blamed the FTC enforcement action. The lab has previously filed an appeal of the FTC's enforcement action in the U.S. Court of Appeals for the 11th Circuit, but Thursday's lawsuit is an additional effort by the company to stall the FTC's enforcement actions.

Join us:
Facebook

Twitter

Pinterest

Tumblr

LinkedIn

Google+

Spotlight on ...
Online Training

    Upgrade your skills and earn higher pay

    Readers to share their best tips for maximizing training dollars and getting the most out self-directed learning. Here’s what they said.

     

    Learn more

IT ManagementWhite Papers & Webcasts

See more White Papers | Webcasts

Answers - Powered by ITworld

Join us:
Facebook

Twitter

Pinterest

Tumblr

LinkedIn

Google+

Ask a Question
randomness