How to design an FTC compliance program for social media marketing

Digg This!     StumbleUpon     Del.icio.us

RELATED CONTENT Compliance Tips Business Model for Information Security: Security right the first time Effective compliance document management in five days FTC compliance mandates new rules for social media marketing New evaluation criteria for Web application security scanners Priorities for your sound regulatory compliance management policy Data loss prevention technology matures but is still no cure-all Threat management for information systems relies on categorization HIPAA-covered entities' first step should be a quality assurance plan Discovery of data breach under HITECH raises big compliance questions D.C. CTO sees compliance, cost savings benefits to cloud computing Industry-specific requirements for compliance Poor application security creates supply chain risk, security threat Business Model for Information Security: Security right the first time Enterprise document management FAQ: IT operations and compliance Google adds Dashboard: Does transparency mean more online privacy? Compliance news quiz: Test your knowledge of FTC, SB 20, PCI and more NERC CSO warns of cybersecurity threats, risk to electric grid FTC compliance mandates new rules for social media marketing McCain answers new FCC net neutrality rules with Internet Freedom Act SAP sees green in sustainability software for carbon compliance Electronic privacy integral to identity management standards, says DHS Risk management and compliance Facing uncertainty, IT turns to governance, risk and compliance, ERM FTC compliance mandates new rules for social media marketing GPS devices, geolocation data create privacy, security risks Threat management for information systems relies on categorization Mass. data protection regulation passes big test in public hearing Does using ISO 27000 to comply with PCI DSS make for better security? FTC pursuing HIPAA violations as a matter of consumer protection Are mandatory business continuity management standards good business? PCI DSS compliance requires better management of vendor risk PCI DSS compliance requires new vendor management strategy

RELATED GLOSSARY TERMS Terms from Whatis.com − the technology online dictionary PCI compliance  (SearchCompliance.com) XBRL  (SearchCompliance.com)

RELATED RESOURCES 2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems Search Bitpipe.com for the latest white papers and business webcasts Whatis.com, the online computer dictionary

>The first step for companies, then, is to get a handle on what their online marketing departments are doing to curry favor with bloggers and create buzz through social media marketing. It is especially important to get a firm handle on the activities of advertising and public relations agencies, since the FTC will hold companies responsible for the actions of these third-party agents.

If compensation, free products or other valuable incentives (such as sponsorships) are offered in the hope of stimulating positive reviews, then the company should institute and document processes for advising bloggers and other new media commentators about their duty to disclose material connections, along with the limits on the factual claims they can make about a products and its beneficial effects. There should also be periodic monitoring of the resulting posts, with documented follow-up action if necessary, to make sure they comply with the FTC's endorsement guidelines.

If relationships with bloggers are managed through an advertising agency or other third party, the written contract with that third party should specifically address each party's rights and obligations with respect to monitoring and compliance. At the very least, a company should reserve the right to audit and preapprove an advertising agency's solicitation of bloggers. By doing so, the company knows which bloggers the agency is dealing with and whether the relationships are of a type that could lead to advertiser-endorser liability and can monitor the bloggers' posts about the company's products.

If all this sounds like overkill (and no doubt it will be met with fierce resistance from some online marketing departments), it is critical to remember that incentivized blogger buzz will now be treated the same as any paid endorsements. According to the FTC, both are advertising subject to disclosure requirements and prohibitions on misleading or unsubstantiated claims. The FTC compliance burden may, in fact, prove too onerous for some companies. In this case, their best bet is to implement policies that prohibit paying others or giving away valuable products in the hope of generating positive online buzz. Favorable reviews are not "endorsements" within the meaning of the Guides unless they have been incentivized in some way.

Implement a social media marketing policy

Promoting FTC compliance within organizations also it makes it essential, now more than ever, to have a social media and blogging policy. Such a policy should cover both references to the company and its products in employees' personal posts, as well as the use of social media and blogs for online marketing and other business purposes.

It's now a best practice to treat company-initiated social media and blog posts as official corporate communications that require consideration of regulatory, securities, litigation and reputational risk issues, and possibly prior legal or regulatory review. The possibility that third-party posts may now be deemed company-initiated endorsements makes it vital to bring all social media marketing activities under one comprehensive policy.

Furthermore, according to the Guides, a company employee who posts messages online promoting the company's product (a common practice) must clearly and conspicuously disclose his relationship to the company. This requirement should be specifically spelled out in the company's social media usage and blogging policy.

The FTC's new rules impose strict compliance obligations in what was previously thought to be an unregulated or loosely regulated space. With the FTC indicating that its primary enforcement focus will be on advertisers rather than bloggers, companies must determine whether the benefits of using bloggers and other social media personalities to reach consumers online outweigh the liability risk and regulatory burden.

Andrew M. Baer is an attorney and founder of Baer Business Law LLC, a Philadelphia firm focused on providing clients with cost-efficient business counseling and transactional assistance, particularly in the areas of technology and intellectual property law. Baer can be contacted at andrew@baerbizlaw.com or @BaerBizLaw on Twitter.