15 U.S.C. § 45c — Unfair and deceptive acts and practices relating to circumvention of ticket access control measures

(a) Conduct prohibited (1) In general: It is unlawful for a person to: bypass a security measure, access control system, or other technological control on a website or online service that a ticket issuer uses to enforce posted purchase limits or protect its posted ticket ordering rules; or sell or offer to sell, across state lines, an event ticket obtained through such a bypass — if the seller either participated in or could control that bypass, or knew or should have known the ticket was obtained that way. (2) Exception: It is not unlawful to create or use computer software or a system to investigate or help enforce or defend against an alleged violation of this section or another law, or to research and analyze flaws and vulnerabilities in these ticket-purchasing security systems, as long as that research is aimed at advancing knowledge of computer system security or helping develop computer security products. (b) Enforcement by the Federal Trade Commission (1) Unfair or deceptive acts or practices: A violation of subsection (a) is treated as violating a Federal Trade Commission Act rule against unfair or deceptive acts or practices. (2) Powers of Commission: The Commission enforces this section with the same jurisdiction, powers, and procedures it has under the Federal Trade Commission Act, as if that Act's provisions were written directly into this section. Anyone who violates subsection (a) faces the same penalties, and gets the same privileges and protections, as under the Federal Trade Commission Act. This does not limit the Commission's authority under any other law. (c) Enforcement by States (1) In general: If a state attorney general has reason to believe residents of that state have been or are being harmed by a violation of subsection (a), the attorney general may sue on the residents' behalf ("as parens patriae") in an appropriate federal district court, to stop further violations, force compliance, and recover damages, restitution, or other compensation for residents. (2) Rights of Federal Trade Commission: The state attorney general must generally notify the Commission in writing, with a copy of the complaint, at least 10 days before filing suit — unless that isn't feasible, in which case notice must go out immediately after filing. The Commission may intervene in the state's case, be heard on everything in it, and appeal any decision. (3) Investigatory powers: Nothing here limits a state attorney general's normal state-law powers to investigate, administer oaths, or compel witnesses and evidence. (4) Preemptive action by Federal Trade Commission: If the Commission already brought a civil or administrative case over a given violation, the state cannot sue the same defendant over that same violation while the Commission's case is still pending. (5) Venue; service of process: A state's lawsuit may be filed in the proper federal district under the normal venue rules, or in another court with jurisdiction. The defendant may be served wherever they live or can be found. (6) Actions by other State officials: Other authorized state consumer-protection officials, not just the attorney general, may also bring these lawsuits, under the same rules. This does not stop a state official from starting or continuing a case under the state's own civil or criminal law.