Letter: an FTC “Twitter Files” investigation finds no evidence that Twitter violated its government data security order, despite Elon Musk's directives to do so
After investigating his handling of the ‘Twitter Files’ for more than a year, the agency found no evidence the company violated consent order
Context & Ripple Effects
The finding closes a specific line of inquiry that began when the FTC sought internal communications, layoff details and identities of journalists with access to company records in its demand for Twitter Files-related records. It also cuts against the earlier DOJ position that Musk’s decisions likely conflicted with the 2022 order, as described in a September 2023 court filing.
The dispute is distinct from the broader fight over the order itself: Twitter had already sought to end the restrictions and halt Musk’s deposition in its bid to terminate the FTC order. The agency’s conclusion addresses this investigation, not necessarily the continuing status of the order.
First-order effects
- Twitter avoids a finding that its handling of the Twitter Files violated the FTC’s data-security order, removing a direct enforcement risk tied to that episode.
- The FTC’s order remains the operative compliance framework unless separately changed; the finding does not itself grant Twitter the relief it sought in court.
Second-order effects
- Twitter and Musk can cite the outcome in arguments that the agency’s investigative demands were disproportionate, while the FTC retains its broader oversight tools under the existing order.
- For companies under privacy or data-security orders, the case underscores that regulator scrutiny can be intensive even when a particular investigation does not establish a violation.
Third-order effects
- Consent-order enforcement is likely to turn increasingly on auditable evidence connecting executive decisions and data access to a concrete breach of mandated controls, rather than on public controversy alone.
- If this pattern holds, firms will have stronger incentives to preserve decision trails and access records that can substantiate compliance during regulator investigations.
The trend: This is one data point in the maturation of consent-order oversight, where corporate data governance is tested through documentable controls and evidence-intensive investigations.