On 10 December 2021, the Federal Trade Commission (FTC) announced that it was considering new rulemakings under section 18 of the FTC Act, which would include clamping down on lax security practices in the context of cybersecurity. Section 18 allows the FTC to designate acts as being unfair or deceptive commercial practices.
Original source