The FTC’s service provider case, In re GMR Transcription Services Inc., provides an example of these allegations and consent order requirements. The GMR case involved the inadvertent exposure of personal medical data maintained by GMR, a company that provides medical transcription services. The FTC concluded that GMR’s failure to adequately choose, contract with, and oversee a data service provider constituted an unfair and deceptive trade practice in violation of Section 5 of the Federal Trade Commission Act.