What the record establishes
A final consent order prohibited misrepresentations and required a comprehensive information-security programme with independent assessments every two years. The settlement did not constitute an admission of a legal violation and carried no initial monetary penalty.
Sources
- Primary recordMicrosoft Corporation Passport matter, File No. 012 3240Federal Trade Commission · 24 December 2002 · accessed 11 August 2026