Janice Schakowsky actually said...
Currently the FTC brings legal actions against companies that fail to employ reasonable data security under Section 5, Unfair and Deceptive Practice Authority.
Context
Schakowsky highlights the FTC's current limitations in enforcing data security.
02/27/2014