WASHINGTON, D.C. — The Federal Trade Commission has given final approval to a settlement with a Canadian company related to allegations it falsely claimed that its Internet-connected smart locks were designed to be “unbreakable” and that it took reasonable steps to secure the data it collected from users.
Tapplock, Inc. sells fingerprint-enabled, Internet-connected padlocks that interact with a companion mobile app, allowing users to lock and unlock their padlocks when they are within Bluetooth range.
The FTC alleged that, contrary to its representations to consumers, the company’s locks were not secure and Tapplock failed to take reasonable precautions or follow industry best practices to protect the consumer data it collected through its app.
Security researchers identified both physical and electronic vulnerabilities with Tapplock’s smart locks, according to the complaint.
The FTC also alleged that Tapplock failed to implement a security program or take other steps that might have helped the company discover electronic vulnerabilities with its locks.
Under the settlement, Tapplock is required to implement a comprehensive security program and obtain independent biennial assessments of the program by an assessor that the FTC has authority to approve. The company also is prohibited from misrepresenting its privacy and security practices.
After receiving no comments, the Commission voted 5-0 to finalize the settlement.
Thanks for visiting! MyChesCo brings reliable information and resources to Chester County, Pennsylvania. Please consider supporting us in our efforts. Your generous donation will help us continue this work and keep it free of charge. Show your support today by clicking here and becoming a patron.