I thought this sounded familiar.
Twitter collected user phone numbers and email addresses for the stated reason of account verification/security. It then used that data for advertising.
It’s currently banned from profiting from deceptively collected data, is required to allow users to utilize MFA not tied to their phone number, must assess the privacy and security risks of new products, must disclose data breaches to the FCC, and limit employee access to user private information.
Not that a Republican FCC would enforce the rules, but this would make it official that Twitter can do all those things. Expect Musk to be sliming into the DM’s of everyone.