Indeed, while the FTC???s action against Spokeo did not charge any employer, recruiter, or other user of the personal background data with wrongdoing, the allegations in the complaint suggest that they could have been charged.4 A still greater liability risk comes not from the FTC but instead from private litigation.