FTC Takes Action Against GoDaddy for Alleged Lax Data Security for Its Website Hosting Services

The FTC announced a proposed order requiring GoDaddy to implement a comprehensive information security program and undergo independent assessments after alleging the company failed to deploy reasonable security controls for its hosting services, leading to multiple breaches (2019–2022) that enabled unauthorized access and malicious redirections. The order also prohibits misrepresentations about security and compliance (including Privacy Shield) and mirrors similar actions taken in other cases; it is subject to public comment before becoming final.