The Federal Trade Commission (FTC) and the Department of Justice say Twitter abused an arrangement it had with controllers, court archives showed.
Twitter had promised to not give individual data like telephone numbers and email locations to sponsors.
Government examiners say the online entertainment organization defied those guidelines.
Twitter was fined £400,000 in December 2020 for breaking Europe's GDPR information protection rules.
The FTC is a free organization of the US government whose mission is the implementation of hostile to trust regulation and the advancement of buyer assurance.
It blames Twitter for penetrating a 2011 FTC request that unequivocally denied the organization from distorting its protection and security rehearses.
The BBC isn't answerable for the substance of outer sites.View unique tweet on Twitter
Twitter produces the majority of its income from promoting on its foundation, which permits clients going from shoppers to big names to enterprises to post 280-character messages, or tweets.
As per a grumbling documented by the Department of Justice for the benefit of the FTC, Twitter in 2013 started requesting that clients give either a telephone number or email address to further develop account security.
"As the grumbling notes, Twitter got information from clients on the guise of tackling it for security purposes, however at that point wound up additionally utilizing the information to target clients with promotions," said Lina Khan, who seats the FTC.
"This training impacted in excess of 140 million Twitter clients, while supporting Twitter's essential wellspring of income."
Validation infringement
Yet again ian Reynolds, overseeing head of PC security firm Secure Team, told the BBC, "Twitter is abusing the trust that their clients have in their foundation by utilizing their confidential data for their own potential benefit and expanding their own income."
He added: "Twitter drove their clients into a misguided sensation that all is well and good by gaining their information through guaranteeing it was for security purposes and safeguarding their record, at the end of the day wound up utilizing the information to focus on their clients with promotions.
"This unscripted TV dramas the power that organizations actually have over your information and that there is far to go before clients can be open to realizing that they have full command over their own advanced impression."
To confirm a record, Twitter expects individuals to give a phone number and email address.
That data likewise assists individuals with reseting their passwords and open their records whenever expected, as well concerning empowering two-factor verification.
Two-factor verification gives an additional a layer of safety by sending a code to either a telephone number or email address to assist clients with signing into Twitter alongside a username and secret word.
Yet, as indicated by the FTC, until basically September 2019, Twitter was additionally utilizing that data to help its promoting business.
It is blamed for permitting promoters admittance to clients' security data.
Notwithstanding the fine, Twitter should likewise:
• quit utilizing the telephone numbers and email tends to it wrongfully gathered
• advise clients about its ill-advised utilization of safety data
• inform clients regarding the FTC policing
• clarify how for switch off customized adverts and survey multifaceted confirmation settings
• give multifaceted validation choices that needn't bother with a telephone number
• execute an upgraded protection and security program which incorporates revealing occurrences to the FTC in 30 days or less
"The Department of Justice is focused on safeguarding the security of shoppers' delicate information," said Vanita Gupta, the US partner principal legal officer.
"The $150m punishment mirrors the reality of the claims against Twitter, and the significant new consistence measures to be forced because of the proposed settlement will assist with forestalling further deceptive strategies that compromise clients' protection."
