FTC announces settlement with GoDaddy over data security allegations

The Federal Trade Commission said it will require GoDaddy (GDDY) to “implement a robust information security program to settle charges that the company failed to secure its website-hosting services against attacks that could harm its customers and visitors to the customers’ websites.” The FTC alleges in its complaint that, since 2018, GoDaddy has failed to implement “reasonable and appropriate” security measures to protect and monitor its website-hosting environments for security threats, and misled customers about the extent of its data security protections on its website hosting services. In its proposed settlement order, the FTC is requiring GoDaddy to establish a comprehensive data security program that is similar to those in other FTC cases, including the recent settlement with Marriott International.