---
title: New FTC Data Breach Settlement Involving Individual Liability and Vendor Controls; NY Releases Data Security Business Guidance
date: 2008-11-07T00:00:00-05:00
author: Import Bot
canonical_url: "https://www.kelleydrye.com/viewpoints/client-advisories/new-ftc-data-breach-settlement-involving-individual-liability-and-vendor-controls-ny-releases-data-security-business-guidance"
section: Client Advisories
---
# New FTC Data Breach Settlement Involving Individual Liability and Vendor Controls; NY Releases Data Security Business Guidance

 November 7, 2008

Kelley Drye Client Advisory

 

 

 

 

 

 

Kelley Drye’s [Information Security and Privacy](/Our-Practices/Regulatory-Government-Relations/Privacy-and-Information-Security-Counseling-and-Co) Practice has prepared an advisory with updates on two recent data security developments: a new Federal Trade Commission (“FTC”) data breach settlement and a summary of the data security business guide recently released by the New York Consumer Protection Board. The FTC case is a reminder to businesses that regulators will attempt to hold a business responsible for its vendors’ security controls (or lack thereof) if the business does not take reasonable steps to confirm that its vendors can reasonably protect personal data shared with them.

 

 

 - Share this entry 
    - 
    - 
    - 
    -
- [  View entry pdf ](https://s3.amazonaws.com/cdn.kelleydrye.com/content/uploads/pdf-snapshots/new-ftc-data-breach-settlement-involving-individual-liability-and-vendor-controls-ny-releases-data-security-business-guidance-20230614093402.pdf)
 
 

### Attachments

- [New FTC Data Breach Settlement Involving Individual Liability and Vendor Controls NY Releases Data](https://s3.amazonaws.com/cdn.kelleydrye.com/content/uploads/attachments/New-FTC-Data-Breach-Settlement-Involving-Individual-Liability-and-Vendor-Controls-NY-Releases-Data.pdf)
 
 

### Related Services

- [State Attorneys General](https://www.kelleydrye.com/practices/state-attorneys-general)
 
 

  Blog

 [  ![](https://d3iuizmsm2hayf.cloudfront.net/content/uploads/Listing-rectangles/Blog_Post_Listing.svg) ![](https://d3iuizmsm2hayf.cloudfront.net/content/uploads/Listing-Images/adlaw_billboard_listing.webp?auto=compress%2Cformat&crop=focalpoint&fit=crop&fp-x=0.5&fp-y=0.5&h=750&q=80&w=1125&s=e1a7aebcee8115938489d6575321e698) 

  ](https://www.kelleydrye.com/viewpoints/blogs/ad-law-access/nad-continues-to-examine-influencer-campaigns) 

Ad Law Access

 July 27, 2026

 [  ](https://www.kelleydrye.com/viewpoints/blogs/ad-law-access/nad-continues-to-examine-influencer-campaigns) 

 

 

 

 Blog

 [  ![](https://d3iuizmsm2hayf.cloudfront.net/content/uploads/Listing-rectangles/Blog_Post_Listing.svg) ![](https://d3iuizmsm2hayf.cloudfront.net/content/uploads/Listing-Images/adlaw_billboard_listing.webp?auto=compress%2Cformat&crop=focalpoint&fit=crop&fp-x=0.5&fp-y=0.5&h=750&q=80&w=1125&s=e1a7aebcee8115938489d6575321e698) 

  ](https://www.kelleydrye.com/viewpoints/blogs/ad-law-access/hawaii-enacts-a-synthetic-performer-law) 

Ad Law Access

 July 26, 2026

 [  ](https://www.kelleydrye.com/viewpoints/blogs/ad-law-access/hawaii-enacts-a-synthetic-performer-law)