Brandon Pugh, cybersecurity director at the R Street Institute, told Seriously Risky Business that the FTC “is no stranger to taking action directed at data brokers” and “it’s clear that the FTC hopes this will be a signal to data brokers.”

He thought, however, that it would be better if Congress passed comprehensive federal data privacy and security laws.

“That would allow Congress to take the lead on privacy policy instead of a federal agency acting by way of ad hoc actions or expansive rulemaking,” he said.