A Practice Note discussing the Federal Trade Commission's (FTC) data security standards and enforcement authority. It addresses the source and scope of the FTC's authority, its data security guidance, and enforcement methods and options. It also includes a discussion of challenges companies have made to the FTC's authority.