Support Centre

You have out of 5 free articles left for the month

Signup for a trial to access unlimited content.

Start Trial

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.

USA: FTC finalizes order against Blackbaud for data breach

On May 20, 2024, the Federal Trade Commission (FTC) announced that it finalized an order against Blackbaud Inc. (Blackbaud) in response to the data breach which led to the unauthorized access by a hacker in 2020 to the company's network and the personal data of consumers. 

The final order requires Blackbaud to: 

  • delete data that is no longer needed for providing its products and services; 
  • ensure that it does not misrepresent its data security and data retention policies in the future; 
  • develop a comprehensive information security program to address the issues outlined by the FTC in its complaint;  
  • implement a data retention schedule that outlines data retention practices; and 
  • notify the FTC in the event of a future data breach that requires reporting to any other local, state, or federal agency. 

You can read the press release here and the final order here