How to Respond to FTC Civil Investigative Demand (You Only Have 14 Days!)

Summary

Summary of "How to Respond to FTC Civil Investigative Demand (You Only Have 14 Days!)"

Special Ops with Emma Rainville
Episode: How to Respond to FTC Civil Investigative Demand (You Only Have 14 Days!)
Release Date: July 26, 2025
Host: Emma Rainville

---

Introduction

In this episode of Special Ops with Emma Rainville, Emma delves into one of the most daunting experiences for marketers and business owners: receiving a Civil Investigative Demand (CID) from the Federal Trade Commission (FTC). Co-host Ryan Poteet joins Emma to break down the intricacies of CIDs, their implications, and the strategic steps businesses should take upon receiving such a demand.

Understanding Civil Investigative Demands (CID)

Emma opens the discussion by highlighting the anxiety associated with receiving a CID, emphasizing that while it's not a lawsuit, it signals that the FTC is scrutinizing your business practices.

Emma [00:36]: "Picture this one morning, you open your inbox and find a letter from the FTC demanding all your marketing records."

Ryan elaborates on the nature of a CID, comparing it to a subpoena issued by the FTC, which requires companies to provide specific documents and information within a tight timeframe.

Ryan [01:46]: "Civil investigative demand is effectively a subpoena. It's issued by the FTC and requires companies to provide documents, information, and written responses to a series of interrogatories."

Reasons for Receiving a CID

The hosts discuss the typical catalysts for the FTC issuing a CID. Often, it stems from suspicions of non-compliance with FTC regulations, but sometimes it's part of broader investigations where multiple entities are targeted to gather comprehensive data.

Ryan [02:38]: "The FTC can issue CIDs to a ton of people as part of their investigation, targeting service providers like advertising agencies and merchant processors to gather information about your operations."

Immediate Steps Upon Receiving a CID

Emma and Ryan outline the critical first steps businesses must take upon receiving a CID, stressing the importance of a calm and methodical response over panic.

Emma [03:40]: "Don't panic. This is not a demand letter from a plaintiff's law firm with some kind of BS consumer protection claim."

Ryan [03:45]: "You need to get an attorney involved. Do not respond directly without counsel."

Key actions include:

1. Engage Legal Counsel: Consult with an attorney immediately to navigate the legal complexities of the CID.
2. Preserve All Documentation: Implement a legal hold to prevent the destruction of any relevant documents or data.
3. Identify a Point of Contact: Designate a primary liaison within the company to coordinate with legal teams and manage information flow.

Preserving Documentation and Data

The episode emphasizes the challenges of data preservation, especially for businesses utilizing various digital platforms like Google Drive or Slack. The need to halt automatic data deletion policies and ensure all relevant information is retained is paramount.

Emma [05:53]: "You need to preserve everything. Automatically deleting customer service calls or any other data can jeopardize your compliance."

Navigating the Investigation with the FTC

Ryan explains that the CID process involves meeting and conferring with the FTC to potentially narrow the scope of their requests, making it more manageable for the business to comply.

Ryan [04:20]: "Meet and confer with opposing counsel to discuss the scope of the investigation and see if requests can be narrowed down."

They also discuss the possibility of filing a motion to quash the CID within 20 days if there are compelling reasons, though this is rarely successful and can lead to a more adversarial relationship with the FTC.

Legal Protections and Liabilities

A crucial part of the conversation revolves around the misconception that forming multiple LLCs can shield business owners from personal liability. Emma clarifies that the FTC often views interconnected LLCs as a single enterprise, making it difficult to evade responsibility by simply dissolving one entity.

Ryan [11:45]: "The biggest thing is whether it's a common enterprise. If businesses are working together with shared ownership, the FTC will view them as one entity."

Long-Term Implications and Resolution

Emma and Ryan caution that the CID process can be lengthy, potentially spanning up to two years, depending on the complexity and the number of parties involved.

Ryan [10:38]: "It's a two-year process. We're in it for a bit."

They stress the importance of setting realistic expectations and working diligently with legal counsel to navigate towards a resolution.

Best Practices and Final Thoughts

Emma concludes by reinforcing the necessity of proactive compliance and the importance of being prepared for such regulatory challenges. She highlights the availability of resources, such as their "C emergency kit," designed to help businesses navigate their first FTC request.

Emma [13:08]: "Compliance isn't optional and silence is not your strategy."

---

Key Takeaways

• Do Not Panic: Receiving a CID is serious but manageable with the right approach.
• Immediate Legal Action: Engage an attorney to handle communications and responses.
• Preserve All Data: Implement a legal hold to ensure no relevant information is lost.
• Designate a Liaison: Have a single point of contact to streamline interactions with legal teams and the FTC.
• Understand Legal Structures: Multiple LLCs do not necessarily protect against FTC investigations.
• Set Realistic Expectations: Be prepared for a potentially lengthy and costly process.

Notable Quotes

• Emma [00:36]: "Picture this one morning, you open your inbox and find a letter from the FTC demanding all your marketing records."
• Ryan [01:46]: "Civil investigative demand is effectively a subpoena. It's issued by the FTC and requires companies to provide documents, information, and written responses to a series of interrogatories."
• Ryan [03:45]: "You need to get an attorney involved. Do not respond directly without counsel."
• Emma [05:53]: "You need to preserve everything. Automatically deleting customer service calls or any other data can jeopardize your compliance."
• Ryan [11:45]: "The biggest thing is whether it's a common enterprise. If businesses are working together with shared ownership, the FTC will view them as one entity."
• Emma [13:08]: "Compliance isn't optional and silence is not your strategy."

Conclusion

This episode serves as a crucial guide for marketers and business owners, demystifying the process and response required when faced with an FTC Civil Investigative Demand. By following the outlined steps—securing legal counsel, preserving data, and maintaining open communication—a business can effectively navigate this challenging scenario and work towards a resolution.

For more actionable strategies and playbooks, visit Special Ops Podcast and access the free resources available in the Visionary Vault.

Transcript

[A]

One of the scariest moments in any marketer's career receiving a cid. That's a civil investigative demand from the fdc. It's not a lawsuit yet.

[B]

Civil investigative demand. It is effectively a subpoena. It's issued by the ftc. You get it in the mail. That requires companies, whoever gets issued one, to provide.

[A]

The reason you get one is because they believe that you've done something that is against FTC compliance. So I have 14 days to take action for what is the first thing I need to do when I get one.

[B]

Don't panic. Well, there's one more step.

[A]

Picture this one morning, you open your inbox and find a letter from the FTC demanding all your marketing records. What? Now, on today's episode, we're tackling one of the scariest moments in any marketer's career, receiving a CID. That's a civil investigative demand from the FDC. It's not a lawsuit yet, but it is the FTC's way of letting you know that you're under a microscope. Ryan and I will be breaking down what it is, what it means, and most importantly, what to do if it lands in your inbox. Hi, I'm Emma Rainville and welcome to another episode of Marketing on Trial where me and my co host Ryan Poteet break down some of the the most interesting parts of legal and direct response and the e commerce world. Ryan.

[B]

Emma, hello. Good to see you.

[A]

Good to see you. So today we're talking about CIDs civil investigative demands. And this is so interesting to me for many reasons. Can you break down what a CID is first and then what it means if you get one or why you might get one?

[B]

So civil investigative demand is a. It's a subpoena basically that requires companies, whoever gets issued one, to provide documents, information. It's the precursor to a lawsuit like you mentioned, but it is effectively a subpoena. It's issued by the ftc. You get it in the mail, it's going to list out a bunch of questions. They're called interrogatories or specifications that you'll have to provide a written response to. There's going to be document requests and then perhaps investigational hearings after that where they're actually calling basically a deposition of people who have relevant information. So nutshell, it's a subpoena. It's got a lot of components to it. There are deadlines, you know, it requires you to move pretty much heaven and earth to get a lot of information together in a short period of time.

[A]

Okay, so let's talk about that. The reason you get one is because they believe that you've done something that is against FTC compliance. Yes, perhaps. Okay.

[B]

Or so they can. So the FTC, when they start an investigation, they can issue CIDs to a ton of people. It can be the basically what I would call the target in the investigation. And if you look at the cid, it'll actually have like the nature and scope of the investigation. They'll tell you what they're looking at now, service providers, for instance. So say you're running a marketing like you're running a brand. You are running some ads that get, you know, exceed your claim substantiation. Right. The CFTC can issue CIDs to service providers, your advertising agencies, merchant processors, pretty much everybody in kind of the, you know, your ambit to try to get information about what you're doing. So anybody can get one. But it also just kind of depends on whether or not you're the target of it or if they're just looking to get information from you.

[A]

Okay, so you generally have just 14 days to respond. Right?

[B]

So you have 14 days to meet and confer with counsel.

[A]

So let's talk about that. So I have 14 days to take action. What is the first thing I need to do when I get one?

[B]

Don't panic. Okay, don't panic. Don't panic.

[A]

I'm panicking thinking about this.

[B]

Oh well, they're not fun. So when I say don't panic, this is not a demand letter from a, you know, a plaintiff's law firm, you know, with some kind of, you know, BS consumer protection. Right. This is something that you actually need. There are deadlines and you actually need to respond quickly. So you've got 14 days. Like it'll say what the response date is, but there will be 14 days to meet and confer with counsel. Does that mean you, you're going to talk to your attorney? You need to get an attorney involved. You should not be doing this yourself. You are going to meet and confer with opposing counsel. You're going to talk about the scope of their investigation. What are they looking for, how can we narrow some of these requests to make them easier to respond to? Some investigations are more expansive. The FTC may not know exactly what they're looking for. So some of the interrogatories of the document requests are just like asking for everything, which could be tough and incredibly expensive. So that first mean confer, it's going to be in, you know, meeting with counsel, introducing yourself and trying to narrow some of these scopes okay. If that fails the next option, within 20 days of receiving it, you need to file a motion to quash. This is rarely done. The FTC is the one that's ruling on the motion to quash. It's not a great. Unless there's a compelling reason to do it, you don't want to go down that road. It starts off a very adversarial process when the goal is to work with the FTC to see if there's. You can work. Work together in a collaborative way to get the FTC what they need and hopefully move the investigation towards some sort of resolution.

[A]

Okay, so I'm just going to repeat back. So we don't want to delete anything, we don't want to delay anything and we don't want to dodge anything. So in direct response, just to back up for a second in direct response E Commerce. A lot of us have been programmed to. When we get these. I just want to be very, very clear. I want to be very clear from it. A lot of us are programmed like you get these copyright or these can spam emails and letters in and you ignore them because you're looking for people who will respond to get money off of. This is not that.

[B]

Definitely not. Definitely not. So you need to get in touch with the ftc. You need to make sure.

[A]

But you need to have an attorney get in touch with the ftc.

[B]

You do not need to be doing that.

[A]

Right.

[B]

You also need to distribute a legal hold. You need to stop deleting everything. Like business can continue depending on what you're doing. But you, but you need to make sure you don't delete anything.

[A]

And a lot of us, a lot of us delete things automatically. So like my customer service calls, for example, I delete those within five days. This is not to say though there are certain elements to what you have that you protect. Like when someone gives a credit card over the phone. That's not what we're talking about here. You beep this.

[B]

We're talking about data preservation, right? So if you have a document retention policy that needs to stop, right? Like you need to start preserving everything. And where this gets difficult is everybody uses Google Drive or some sort of platform. Things are constantly chopping box. You gotta save all that stuff. And so that you are gonna need to find somebody who's gonna be kind of your point person on getting all the documents and all the information together, but also identifying people who have relevant information. So whether it's in Slack or it's in Google Drive are people Using their own personal drives. You need to figure out where those documents are located, make sure that people are saving it.

[A]

Let's discuss that for just one moment. Cause operationally speaking, the amount of times that I've gone into companies and this contractor, this employee, this vendor, this service provider has your documentation and their drive, this can be incredibly challenging. And we worked on a case a couple years ago, I don't know if you remember all of the. All of the essa for. I believe it was, you know, how if the ftc, this is for fda. If the fda, if you have five levels of criteria on a complaint, you have to report yourself, but one of the contractors had it all in their Google Drive that.

[B]

That's on you. You need to send out a notice. And kind of the fine line is civil investigative demand. We kind of didn't talk about this before. It's private at this point. It's not a matter of public record. And so businesses don't want this to be public. I mean, especially if you're a brand or, you know what, any kind of business, you don't want anyone knowing that you are, you know, under investigation. Because immediately, if someone thinks that you did something wrong, there are plenty of reasons why you get a civil investigative demand. You might not have done anything that, you know, would result in any sort of liability, but for right now, it's confidential. And so you want to walk that fine line of you got to tell third parties about, you know, the documents and information that they have so they preserve it. So you need to figure out who they are. But you also want to be kind of careful about who you tell so it doesn't become a PR nightmare.

[A]

Right. Okay. So.

[B]

Hey, everyone. Interrupting this podcast to remind everybody to like and subscribe our podcast and to.

[A]

Sign up for the visionary [e-mail] for a whole bunch of free RE's. Step one, notify or get a legal team. You get a CID immediately. Preserve all documentation and data.

[B]

Correct.

[A]

Do not respond directly without counsel is what I heard from you. Now, I've got all that together. If they're doing this, it's because they're investigating me. My goal. Your goal is my attorney should be to get this squashed before it turns into a lawsuit or a fine or whatever. Right. So what do I do now? So I got. I got the attorney. I preserved all of my information on my data. You've responded. Now what do I do to try and make this go away?

[B]

Well, there's one more step.

[A]

Okay.

[B]

I mean, so you get counsel involved, you've met with the ftc, you talked about some of the requests, how you can narrow them, and at that point all the work begins.

[A]

Okay, that's when it starts.

[B]

Yeah, that's when it starts. Yeah. No, that's when it starts. You need to have one person who's going to be a point of contact, who's going to work with your legal team. You know, I remember working with one client where I think it was their, their CEO and she was the point of contact for everything. Super organized, would be able to track stuff, move over and find advertising, creative, shameless plug.

[A]

This is why you need a great CEO.

[B]

And so that person's going to be the point of contact, the liaison, get all the stuff from all the people. And that's when council is going to start putting together the responses. So after that response, and there could be many responses. Right? I mean, it could you agree to a rolling production or you're going to answer certain questions in a certain cadence because whatever reason after that is all complete. You know, that's when kind of the advocacy component starts. And you're advocating throughout the entire portion of it. But you're going to be submitting papers to the FTC explaining like, okay, you've asked for this, here's the information. This is why this is not an issue, or it is an issue, but this is what we've done to fix it, or something like that. So there's the kind of the investigation part that you're going to do with your counsel and then provide a written response after that. That's when we start getting into trying to move it towards resolution.

[A]

Got it.

[B]

And that's going to depend a lot on what you find out in your internal investigation, how you respond to the.

[A]

FTC and what you've done on the front end to get there.

[B]

Exactly.

[A]

Best case scenario, what kind of time frame am I looking at dealing with this lawyer answer?

[B]

It depends. We've had some that have gone multiple years.

[A]

Wow.

[B]

Just because of how big it is, how many players are involved.

[A]

You get 60 supplements with 5 million claims over two years. Makes sense.

[B]

So I would say a two year process. Two years is a good. Like this is. That's what I tell clients. We're in it for a bit.

[A]

Yeah. So probably don't get there.

[B]

Try not to.

[A]

Yeah. Wow. Scary stuff. I think every marketer is terrified of this. And just to kind of draw off of something that I've heard a lot in the industry is this is why I have all different companies for all my different products, I'll just shut down. That doesn't work in this situation, does it?

[B]

No, the FTC is not a traditional litigant.

[A]

I mean, so explain that because I don't think a lot of people understand this. I've heard this over and over again and I've tried to eloquently verbalize what I know to be true. But because I don't have the vocabulary that you have and the vernacular you have, it doesn't ever work. So help me explain. Most people think that an LLC protects them, right? So I have an llc, it's got a business, I get a cid, I shut down the business. What's the big deal? What can they do to me?

[B]

Well, it comes down to whether or not it's common enterprise. And so, you know, if these businesses are all working together in tandem, if there's someone at the top of it, if there's shared ownership, a board, all of that, the FTC is going to look at and be like, this is all one big enterprise. They're all working together. I mean source, you know, shut down that one LLC you've got, they'll find.

[A]

A way that you're piercing the corporate veil somewhere.

[B]

Yeah, you got five more LLC and you know, holding company up here. I mean, it's all working together. So the FTC is not, let's say.

[A]

I only have this one company is all I have. I just shut it down. What's the big deal? Are they going to continue to come after me?

[B]

Absolutely. Well, in the biggest thing.

[A]

And they can come after me personally. The LLC doesn't protect me.

[B]

No. And that's the biggest thing the ftc. In recent years, you know, probably the last five years, there's been a focus on putting owners on the order.

[A]

Right.

[B]

And it's not just the business anymore.

[A]

Right.

[B]

They are looking to put, you know, if you run a business, you are going to be part of that consent order, Right? So yeah, shut it down. But they're still coming after the owners.

[A]

I think it's an important thing to make sure that we explain to people because in the wild wild west days of direct response and E commerce, it's churn and burn. Right. Make a bunch of money, burn it down, start a new company, make a bunch of money. And I personally haven't really gotten involved in those businesses, but we know a lot of people who do that and that's just not a thing anymore. And I don't think a lot of people understand that.

[B]

Well, no, and that's why the C, if you get a CID and you are the target of it and you've done something wrong, the CID is almost the better outcome at all. Because it's not like the FTC is immediately going to court, filing a lawsuit, getting an asset freeze, you know, and seizing a bunch of assets. They're actually coming to you first and you're going to kind of walk through this investigation together. So if you know you've done something.

[A]

Wrong, getting a CID is probably the best case scenario.

[B]

Exactly.

[A]

Awesome.

[B]

So to just kind of net all this out. CID is not the end of the world. It's. It's not the end of your business. You will get through it. It's painful, it's probably expensive. Expensive. But, you know, so long as you set expectations at the beginning, know that there is a future at the end of this, you know, get good counsel. Just put your head down and work through it.

[A]

Beautiful. If you've never heard of a cid, you're not ready for one. And if you just got one, you're already behind. Ryan and I created for you a C emergency kit that we hope you never have to to use. This is going to be to help you navigate your first FTC request. Should you get one. Stay protected and stay smart. You can download that for free in the visionary [e-mail] ops podcast.com. compliance isn't optional and silence is not your strategy. So follow us for more like and subscribe and see you next time.