Section 5(a) of the FTC Act empowers the agency to enforce against “unfair or deceptive acts or practices in or affecting commerce.” Over the past two decades, the FTC has used this authority extensively to hold businesses to fair and transparent privacy and security standards.