How FTC Investigations Begin

FTC investigations can be initiated in several ways. Consumer complaints filed through the FTC’s Consumer Sentinel Network are a significant source of enforcement leads — a surge in complaints about a particular company or practice can trigger an FTC review. The FTC also monitors advertising and business practices proactively, conducting sweeps of particular industries, reviewing advertising claims for substantiation, and tracking enforcement trends in areas it has identified as priorities. Competitor complaints, congressional referrals, news coverage, and referrals from state attorneys general can also trigger FTC attention.

The early stages of an FTC inquiry are often not visible to the company being investigated. The FTC’s staff may review publicly available information — websites, advertisements, consumer reviews, court filings — for months before making any contact with the company. In some cases, the first notice a company receives that it is under investigation is a Civil Investigative Demand. In other cases, the FTC may send an informal request for information before escalating to a CID, or may open informal discussions with company counsel.

Civil Investigative Demands

A Civil Investigative Demand is the FTC’s primary formal investigative tool. A CID is similar to a subpoena — it is a legally binding demand for documents, information, or testimony — but it can be issued by the FTC without court involvement. The FTC can issue a CID whenever it has reason to believe that a person has information that is relevant to whether any person has engaged in a violation of any law administered by the FTC. This standard is relatively low, and the FTC’s CID authority is broad.

A CID can require a company to produce documents, to answer interrogatories (written questions), or to provide testimony from company representatives. The scope of a document CID can be extremely broad, requiring production of millions of documents on a tight schedule. Responding to a CID is expensive and disruptive, requiring significant internal resources and legal support even when the company has done nothing wrong. Many companies that receive CIDs ultimately do not face enforcement action, but the cost and burden of responding is substantial regardless.

Companies that receive CIDs have a limited ability to challenge them. A company can petition the FTC to modify or set aside a CID if it is unreasonably broad, burdensome, or outside the FTC’s jurisdiction. However, courts have historically given the FTC considerable deference in its investigative authority, and successful challenges to CIDs are rare. The more common response is to negotiate the scope and timing of production with FTC staff, which may result in narrowing of the request or an extension of the response deadline.

The Investigation Process

After receiving a company’s CID response, FTC staff will review the documents and information produced and may issue follow-up CIDs seeking additional information. Staff may also interview company employees, consult with industry experts, analyze consumer complaint data, and gather evidence from other sources. The investigation may take months or years before staff makes a recommendation to the Commission about whether to bring an enforcement action.

During the investigation, companies often have informal dialogue with FTC staff that can significantly affect the outcome. A company that cooperates fully, provides context for its practices, identifies compliance improvements it has made or plans to make, and demonstrates that it has taken seriously any consumer harm the FTC is concerned about is in a better position than a company that is uncooperative or that appears indifferent to consumer welfare. The FTC staff has significant discretion about which matters to recommend for formal enforcement, and demonstrating good faith can sometimes result in the matter being closed without action.

Consent Orders: The Typical Resolution

The vast majority of FTC enforcement actions are resolved through consent orders — negotiated settlements in which the company agrees to stop the challenged practices, to implement specified compliance measures, and in some cases to pay monetary redress or civil penalties, without admission of wrongdoing. Consent orders are entered as final orders of the FTC and are legally binding on the company for a specified period, which is often 20 years.

The operational requirements of a consent order can be extensive. A company subject to a consent order may be required to implement a comprehensive compliance program with specific elements, designate a compliance officer, submit periodic compliance reports to the FTC, provide the FTC with notice of any change in corporate structure, and allow FTC access to the company’s books, records, and personnel for compliance monitoring. These requirements can impose significant ongoing costs and management attention for decades after the original violation.

Civil Penalties for Order Violations

Once a company is subject to an FTC consent order, subsequent violations of that order can result in civil penalties of up to tens of thousands of dollars per violation per day. This penalty structure creates enormous financial exposure for companies that violate consent orders, because the same conduct repeated over many days against many consumers can quickly generate penalties in the hundreds of millions of dollars. Several companies have faced civil penalty actions following violations of FTC consent orders, resulting in some of the largest civil penalty settlements in FTC history.

The civil penalty authority for order violations is one reason why consent orders are taken so seriously by experienced compliance counsel. A company that enters a consent order and then resumes the challenged practices, or that fails to implement the required compliance program effectively, is exposed to penalty liability that can dwarf the cost of the original settlement. The consent order is not the end of the FTC’s involvement — it is the beginning of a long-term compliance relationship.

Section 13(b) Injunctions and Civil Penalties

In cases involving ongoing violations, the FTC can seek injunctions and monetary relief in federal court under Section 13(b) of the FTC Act. The Supreme Court’s 2021 decision in AMG Capital Management v. FTC significantly curtailed the FTC’s ability to obtain monetary relief directly under Section 13(b), holding that Section 13(b) does not authorize the FTC to seek equitable monetary relief such as disgorgement. Since AMG, the FTC has pursued civil penalty authority through other mechanisms, including the rulemaking process and Section 19 of the FTC Act, which authorizes monetary relief for violations of FTC rules.

The AMG decision changed the FTC’s enforcement calculus without eliminating monetary liability. Companies that violate FTC rules — including the Telemarketing Sales Rule, the Negative Option Rule, the CAN-SPAM Rule, and others — can still face civil penalties under Section 19. The FTC has also responded to AMG by investing in formal rulemaking to codify practices that previously would have been addressed through Section 13(b) litigation. Businesses should monitor FTC rulemaking activity in their industry to understand emerging compliance obligations before they become enforcement targets.

See Also