### FTC's Privacy Crackdown: What You Can Do

- **Map your data.** Make sure you know what personal information you’re collecting (including from apps, websites, and online services) and which other entities can access the data. Look at your website’s cookies, any Software Development Kits (SDKs) integrated into your apps, and any service providers with which you share data.
- **Determine whether you’re collecting sensitive personal information.** The FTC says browsing and location data are sensitive. These types of data can provide information about people’s visits to sensitive websites and locations—but the FTC states that they’re sensitive “full stop.”
- **Consider your purposes.** For every type of data you collect, ask yourself, “why?” You might need consent to collect and use personal information for purposes beyond what’s necessary to provide your services.
- **Be transparent.** In your privacy notice—and, where necessary, other notices like cookie pop-ups—disclose each type of personal information you collect, what you use it for, who else might receive it, and why.

[This guide focuses on 10 steps to achieve an effective privacy management program with DataGrail.  
Learn More](/content/resources/reports/how-to-run-a-privacy-program-with-datagrail/?ir=_blog_data-privacy_ftc-privacy-crackdown-lessons-from-three-recent-cases_/index.html)