FTC official says 'we don't enforce GDPR' on eve of EU rule going to effect

The Federal Trade Commission's lead enforcement official on privacy said the agency does not expect to take on an expanded role on transatlantic data flows as the European Union's new General Data Protection Regulation goes into effect Friday.

“We don't enforce GDPR,” FTC's Maneesha Mithal told lawyers at the Georgetown University Cybersecurity Law Institute conference today.

FTC has authority to enforce EU data requirements in the United States, indirectly, under the Privacy Shield agreement, which allows U.S. companies to certify...