Intro / Hook

A new letter to the Federal Trade Commission is putting X Corp. back under the privacy spotlight — and the argument is simple: changing a company’s name or ownership should not be enough to escape a major privacy order.

What Happened

On July 2, 2026, the EFF and allied organisations submitted a letter opposing X Corp.’s petition to set aside or modify the FTC’s 2022 order concerning Twitter. X argues that the company has been transformed under new ownership, that the order is costly, that other privacy laws already apply, and that FTC oversight could raise First Amendment concerns. The EFF-led letter rejects those arguments. It says the legal standard for terminating an FTC order is demanding, that the 2022 order still binds X as Twitter’s successor, and that the order’s monitoring provisions are about privacy and data security compliance — not editorial control or content moderation.

Why It Matters

This matters because privacy enforcement often depends on more than one-time fines. The EFF’s argument is that long-term orders, audits, reporting requirements, and direct FTC oversight are what give regulators leverage after a company has already broken privacy commitments. If a major platform can escape those obligations after only a few years by arguing that it has changed, that could weaken the deterrent effect of future FTC orders. For users, the practical question is whether companies that collect, monetise, and increasingly train AI systems on large amounts of data will face lasting accountability — or whether privacy protections can be treated as negotiable once the business model changes.

What the Details Show

The letter argues that the 2022 order came after X Corp., then Twitter, had already violated a previous FTC settlement order from 2011. It says the earlier conduct involved misrepresentations about how user contact information was protected and used, affecting more than 140 million users. The organisations also point to the company’s continuing reliance on user data for targeted advertising, and argue that X’s expansion into generative AI creates even stronger incentives to collect and use consumer data. Their concern is that removing FTC oversight now could weaken privacy and security protections at exactly the moment when the company’s appetite for data may be growing.

Reading Between the Lines

The deeper issue here is accountability. X Corp., formerly Twitter, is asking the FTC to set aside or modify a 2022 order that followed earlier findings about deceptive privacy and advertising practices. But the EFF and 14 other public-interest organisations argue that the order should stay in place, because it remains one of the FTC’s strongest tools for monitoring a company that has already been under privacy enforcement more than once. This is not just about X. It is about whether big tech companies can treat consent orders as temporary inconveniences — something to renegotiate once ownership changes, business priorities shift, or compliance becomes expensive.

What We Do Not Know

We do not yet know how the FTC will rule, whether it will preserve the 2022 order unchanged, modify parts of it, or accept any of X Corp.’s arguments. We also do not know how much weight the Commission will give to X’s claims about company transformation, AI innovation, compliance costs, or First Amendment concerns. More broadly, we do not yet know whether this case will remain a dispute about one company’s privacy order, or become a wider precedent for how durable FTC consent orders are when major platforms change ownership, strategy, or corporate identity.

What Happens Next

The FTC now has to decide how to respond to X Corp.’s petition and the public comments opposing it. If the Commission keeps the order intact, X remains under the privacy and security obligations agreed to in 2022, including compliance oversight and independent assessment requirements. If the FTC modifies or ends the order, the decision could become a major signal to other companies under consent decrees. The EFF’s warning is that weakening the order could invite more companies to argue that corporate restructuring, new ownership, compliance costs, or changed business priorities are enough to escape earlier privacy commitments.

References & Further Reading