FTC requires Blackbaud to delete unnecessary data in settlement

Blackbaud will be required to delete personal data that it doesn’t need to retain as part of a settlement with the Federal Trade Commission over charges that the company’s “lax security allowed a hacker to breach the company’s network and access the personal data of millions of consumers including Social Security and bank account numbers,” the agency said in a statement. In addition to requiring Blackbaud to delete data that it no longer needs to provide products or services to its customers, the proposed order will prohibit the company from misrepresenting its data security and data retention policies. The proposed order also will require Blackbaud to develop an information security program that would address the issues highlighted by the FTC’s complaint.