1. Civil Investigative Demands and Regulatory Subpoenas
A Civil Investigative Demand is the FTC's primary tool for compelling the production of documents, data, and testimony in a consumer protection investigation, and the company's response to a CID or regulatory subpoena directly affects the scope of the agency's inquiry.
What Is a Civil Investigative Demand and How Should a Company Respond?
A Civil Investigative Demand is a formal legal process issued by the FTC to compel the production of documents, data, written reports, and oral testimony from any person or company that the FTC believes may have information relevant to a consumer protection investigation, and it does not require judicial approval. Upon receipt of a CID, the company must immediately implement a litigation hold, retain experienced consumer protection counsel to review the scope of the demand and assess any available legal objections, and develop a production plan that protects privileged communications.
Consumer protection disputes and regulatory compliance counsel can advise on the specific legal obligations triggered by the CID, assess the scope of the document production requirements, and develop the CID response and privilege protection strategy.
What Are the Key Legal Obligations When Responding to a Regulatory Subpoena?
A regulatory subpoena issued by a state attorney general compels the production of documents, data, and testimony under the authority of the applicable state consumer protection statute, and the company's obligations in responding to a state AG subpoena are generally similar to its obligations in responding to an FTC CID, including the obligation to preserve all potentially responsive documents, to assert any applicable privilege claims in a privilege log, and to produce all non-privileged responsive documents within the time specified in the subpoena. The company should also assess whether the investigation is limited to the state that issued the subpoena or whether it is part of a multistate investigation.
| Investigation Stage | Ftc Process | State Ag Process |
|---|---|---|
| Investigation initiation | Non-public inquiry or formal investigation order | Civil investigative demand or subpoena |
| Document demand | Civil Investigative Demand (CID) for documents, data, and written reports | State administrative subpoena or CID under applicable state statute |
| Testimony | CID for oral testimony or investigational hearing | Deposition subpoena or investigational hearing |
| Resolution | Consent order, administrative complaint, or federal court action | Consent decree, assurance of voluntary compliance, or state court action |
| Penalties | Civil penalties, equitable monetary relief, injunctive relief | Civil penalties, consumer restitution, injunctive relief, attorneys' fees |
Consumer protection law and regulatory risk management counsel can advise on the specific procedural requirements applicable to the FTC or state AG investigation and develop the comprehensive investigation response strategy.
Consumer protection disputes and civil litigation evidence counsel can advise on the specific legal obligations triggered by the regulatory subpoena, assess the scope of the required production, and develop the subpoena response and privilege protection strategy.
2. Ftc Act Section 5 and Udap Enforcement
Section 5 of the FTC Act prohibits unfair or deceptive acts or practices in or affecting commerce, and state attorneys general have parallel authority under state consumer protection statutes to investigate and prosecute consumer fraud, deceptive advertising, and unfair business practices.
What Conduct Triggers Ftc Enforcement under Section 5 and What Are the Penalties?
Section 5 of the FTC Act prohibits unfair or deceptive acts or practices in or affecting commerce, and the FTC has broad authority to investigate and take enforcement action against any company engaged in unfair or deceptive conduct, including false or misleading advertising, deceptive pricing practices, unauthorized billing, and negative option marketing that does not clearly disclose the terms of a subscription. The FTC can resolve an investigation through a consent order that requires the company to stop the challenged practices, pay civil monetary penalties, provide consumer redress, and submit to compliance monitoring.
Consumer protection law and unfair competition law counsel can advise on the FTC Section 5 liability exposure and develop the FTC enforcement defense strategy.
How Do State Attorneys General Investigate Consumer Fraud under Little Ftc Acts?
State attorneys general have broad authority under state consumer protection statutes, commonly known as Little FTC Acts, to investigate and prosecute consumer fraud, deceptive advertising, and unfair business practices, and many state AG investigations are conducted in coordination with the FTC or with other state attorneys general as part of a multistate investigation that can result in a multistate consent decree binding the company in all participating states. State AG consumer protection investigations can be triggered by consumer complaints, media reports, referrals from federal agencies, or whistleblower tips.
Consumer protection disputes and false advertising lawsuit counsel can advise on the state attorney general consumer fraud investigation, assess the state UDAP exposure, and develop the state investigation defense and resolution strategy.
3. Consent Decrees, Investigative Hearings, and Defense Strategy
A consent decree is the most common resolution of a consumer protection enforcement action, and the terms of the decree, including the scope of the injunctive relief, the amount of civil penalties, and the compliance monitoring obligations, will govern the company's business operations for years.
What Is a Consent Decree and How Should Companies Negotiate Its Terms?
A consent decree is a court-ordered agreement between the FTC or state AG and the company that resolves the investigation without a formal adjudication of liability, and it typically requires the company to stop the challenged practices, pay civil monetary penalties and consumer redress, implement a compliance program, and submit to monitoring by the agency or an independent compliance auditor. The company should approach consent decree negotiations with the goal of limiting the scope of the injunctive relief to the specific practices that are the subject of the investigation.
Consent decrees and settlement negotiation counsel can advise on the consent decree negotiation most appropriate for the specific enforcement action and develop the consent decree negotiation and compliance strategy.
How Should Companies Prepare for and Conduct an Investigative Hearing?
An investigative hearing is a formal proceeding in which the FTC or state AG questions a company witness under oath about the company's business practices relevant to the investigation, and the testimony given at an investigative hearing can be used against the company in any subsequent enforcement action, making thorough witness preparation the most important step. The company's counsel should prepare the witness to answer questions accurately and completely and develop a clear and consistent narrative that demonstrates the company's good faith.
Consumer protection law and internal investigation services counsel can advise on the investigative hearing preparation and develop the witness preparation and investigative hearing strategy.
4. Data Privacy Investigations and Proactive Compliance
The CCPA, CPRA, and Dodd-Frank Act have expanded the consumer protection obligations of digital businesses and financial services companies, and proactive compliance with these statutes is the most effective strategy for reducing the risk of a consumer protection investigation.
Consumer protection law and data privacy counsel can advise on the CCPA, CPRA, and Dodd-Frank consumer protection obligations applicable to the specific company's digital and financial products, assess the current compliance posture, and develop the data privacy and digital consumer protection compliance strategy.
30 Mar, 2026
