Updated every Monday!   Subscribe to free weekly newsletter.

Lord & Taylor’s Missing Fine Print

Very often the worst type of fine print disclosure is the one that is missing, despite being required to be there. That is what retailer Lord & Taylor did (or failed to do) according to the Federal Trade Commission.

In early 2015, Lord & Taylor was coming out with a new line of clothing aimed at younger women. To help get their attention, the retail chain wisely enlisted the help of 50 “fashion influencers” — hip bloggers and fashion writers with a big following. They were given the same free dress, and paid between $1,000 and $4,000 to post a picture of themselves along with certain hashtags on Instagram.

Instagram dress

*Missing MOUSE PRINT:

Under the FTC’s Testimonial and Endorsement Guidelines, these women failed to disclose the material connection they had to Lord & Taylor, that they received the product for free, and that they were paid to promote the dress and clothing line.

Lord & Taylor didn’t stop there. They paid an online fashion magazine, Nylon, to write an article about the new clothing line, and got to review and approve it before publication.

Nylon magazine

*Missing MOUSE PRINT:

Besides violating the testimonial guidelines by not disclosing that the magazine was paid to write this story, the presentation of the story on Nylon’s website made the story appear just like any other article they publish. This is called “native advertising” when what really is an ad is deliberately made to look like independent editorial content of the publisher. Under the brand new Native Advertising Guidelines of the FTC, this content had to be clearly labeled as a “paid advertisement” or “sponsor paid content” or similar.

Why is the FTC making a big stink about this? First, consumers have a right to know whether what they are reading is an objective, real opinion of an authority on the subject, or just the opinion of the advertiser, to which they might assign less weight or credence. Secondly, disguised advertising works. In the Lord & Taylor case, the fashion influencers’ posts reached 11.4 million individual Instagram users over just two days, and the dress quickly sold out.

In its proposed consent order, the FTC says that going forward Lord & Taylor can’t falsely claim, expressly or by implication that an endorser is an independent user or ordinary consumer. If there is a material connection between the company and an endorser, Lord & Taylor must clearly disclose it in close proximity to the claim. And Lord & Taylor can’t suggest or imply that a paid ad is a statement or opinion from an independent or objective publisher or source.

No fine is being imposed.

Updated every Monday!   Subscribe to free weekly newsletter.

Is LinkedIn Telling it Straight?

Last week, LinkedIn, a site where professionals network with each other, sent some users this less-than-urgent email:

LinkedIn email

However, at the same time, LinkedIn’s chief technology officer posted this more dire warning on the company’s official blog:

*MOUSE PRINT:

In 2012, LinkedIn was the victim of an unauthorized access and disclosure of some members’ passwords. At the time, our immediate response included a mandatory password reset for all accounts we believed were compromised as a result of the unauthorized disclosure. Additionally, we advised all members of LinkedIn to change their passwords as a matter of best practice.

Yesterday, we became aware of an additional set of data that had just been released that claims to be email and hashed password combinations of more than 100 million LinkedIn members from that same theft in 2012. We are taking immediate steps to invalidate the passwords of the accounts impacted, and we will contact those members to reset their passwords. We have no indication that this is as a result of a new security breach.

UPDATE: May 18, 5:30 p.m. PT

We’re moving swiftly to address the release of additional data from a 2012 breach, specifically:

We have begun to invalidate passwords for all accounts created prior to the 2012 breach​ that haven’t update​d​ their password since that breach. We will be letting individual members know​ ​if they need to reset their password.

So he’s saying that maybe over 100 million emails addresses and passwords (actually 117 million according to news reports) were stolen previously and are now for sale, and not just the 6.5 million originally believed.

It seems that their casual email to members seriously underplays the seriousness of the situation. And as we’ve said before, the worst mouse print is the disclosure that is not made.

UPDATE MAY 25:

LinkedIn just sent a “Notice of Data Breach” to registrants outlining in more detail what happened. (They must have read Mouse Print* this week. )

Updated every Monday!   Subscribe to free weekly newsletter.

This University Educates Crooks

It seemed like a fine school. The University of Northern New Jersey had both undergraduate and graduate programs. It specialized in business administration, computer science, and health sciences. It was accredited by two organizations and maintained an elaborate website for students and prospective students.

Hertz

 

The school had its own Facebook page:

Facebook unnj

 

The university was recognized by the state of New Jersey’s Department of Higher Education:

Dept. of Higher Ed

 

There was just one problem.

*MOUSE PRINT:

The university was fake. It was set up as a sting operation in 2012 by Homeland Security to catch scamsters who forged documents and paid bribes to get foreign students admitted. That would then qualify the foreign student to gain entry into the U.S. via a fraudulently obtained student visa.

Here is the story from the New York Times (click top link on redirect page).