Patrick Toomey actually said...
Section 5 of the FTC Act does authorize and empower the Commission to make enforcement actions against a company that violates its own stated privacy policy.
Context
Toomey emphasizes the FTC's authority to enforce privacy policy violations.
05/08/2012