03/28/2023
https://congress.gov...
"Outside of such authority specifically granted by statute in this case, the FTC's authority to promulgate rules regarding privacy and data security is severely limited."
"Currently the FTC brings legal actions against companies that fail to employ reasonable data security under Section 5, Unfair and Deceptive Practice Authority."
"Congress could help us have a clearer data security mandate by just clarifying."
"And it seems to me and then having to do it case-by-case like congressional authority, I think, is really cumbersome."