FTC Reaches Settlement in First Enforcement Action Against a Retail Tracking Company
Time 1 Minute Read

On April 23, 2015, the Federal Trade Commission (FTC) announced that Nomi Technologies (Nomi) has agreed to settle charges stemming from allegations that the company misled consumers with respect to opting out of the company’s mobile-device tracking service at retail locations. The settlement marks the FTC’s first § 5 enforcement action against a retail tracking company.

Nomi provides a customer analytics service called “Listen” to brick and mortar retailers through the use of mobile device tracking technology. As part of this service, Nomi deploys sensors to its clients’ retail locations to help track consumers’ movements through their stores. According to the FTC complaint, these sensors detect the media access control (MAC) address of mobile devices searching for WiFi networks at the locations in order to collect information about customer traffic at the locations. Notably, the FTC found that despite Nomi using a hashing technique to obfuscate the MAC address of each consumer’s mobile device, the hash still constituted a persistent unique identifier for that mobile device that allowed the company to track consumers.

Read the full client alert.

You May Also Be Interested In

Time 1 Minute Read

The California Consumer Privacy Act continues to drive significant enforcement activity—particularly when minors’ data is involved. In a recent action, the California Privacy Protection Agency imposed a $1.1 million fine on youth sports platform PlayOn Sports for alleged violations involving student data and inadequate opt-out mechanisms. The case highlights growing regulatory scrutiny around how companies collect, share, and provide transparency about personal information—especially when schools and students are involved. 

Time 3 Minute Read

The Federal Trade Commission has issued a new Policy Statement encouraging the adoption of robust age‑verification technologies by pledging not to bring enforcement actions under the COPPA Rule against operators of general‑ or mixed‑audience sites that collect, use or disclose personal information solely to determine users’ ages, so long as long as they follow strict safeguards.

Time 1 Minute Read

On February 6, 2026, the Federal Trade Commission announced its second report to Congress on its efforts to combat ransomware and other cyber attacks.

Time 9 Minute Read

Since its first day in office, the current administration has taken steps to curtail the development of renewable energy, and wind energy in particular. Just over a year in, the administration’s intentions do not seem to have changed, but there are signs that legal challenges are affecting implementation of its policies toward renewable energy development.

Search

Subscribe Arrow

Recent Posts

Categories

Tags

Authors

Archives

Jump to Page