 The company would be required to have its privacy policies assessed every two years for the next twenty years.Along with the civil penalty, FTC has prohibited Path from making any misrepresentations about the extent it maintains confidentiality of its users' personal data.In April 2013, a user alleged that Path sent spam SMS invitations to his phone contacts.