FTC May Have Some Cyber Jurisdiction Over Nonprofits

Although the Federal Trade Commission has traditionally lacked authority to regulate nonprofit organizations, its oversight was expanded under specific circumstances by the Fair and Accurate Credit Transactions Act, which enabled the Red Flags Rule—which requires covered entities to have plans to protect consumers from identity theft—and the Gramm-Leach-Bliley Act, which governs how financial institutions manage the private information of individuals.