πŸ‡ΊπŸ‡ΈFederal Trade Commission Act, Section 5

Skin

← Back to laws in United States

Federal Trade Commission Act, Section 5

Federal Trade Commission Act, Section 5

Federal Trade Commission Act, Section 5 is part of the United States sectoral privacy framework. It should be applied to the covered actor, record, communication, service or practice identified by the statute rather than treated as a general law for all personal data.

Current official version

Effective status: September 26, 1914, as amended

Citation: 15 U.S.C. s. 45

Source basis: Current 15 U.S.C. section 45 and official FTC privacy and data-security enforcement materials.

Scope

Section 5 prohibits unfair or deceptive acts or practices in or affecting commerce. In privacy and security matters, it applies when an organisation misrepresents its practices or causes, or is likely to cause, substantial consumer injury that is not reasonably avoidable and is not outweighed by countervailing benefits, subject to statutory jurisdictional limits.

Operational obligations

Organisations should ensure that privacy, security, AI and data-use statements are accurate and substantiated; honor material promises and consumer choices; maintain safeguards proportionate to risk; avoid dark patterns; and remediate known practices that cause substantial consumer injury.

Maintain an evidence-based applicability decision, identify the systems and records within scope, assign owners, configure access and disclosure controls, document legal bases and exceptions, train relevant staff and retain the records needed to demonstrate compliance.

Important boundary

Section 5 is not a checklist statute and does not create a general federal privacy code. Compliance depends on actual practices, representations, consumer injury, FTC rules and the facts developed in enforcement matters.

Enforcement

The Federal Trade Commission enforces Section 5 through administrative and federal-court processes. Remedies depend on the legal route and may include orders, injunctive relief, consumer redress and civil penalties for rule or order violations.

What this means for you

Map this law to specific products, records, communications and teams. Verify current statutory and regulatory text before relying on an exception, consent, permissible purpose or enforcement assumption.

Other laws in United States
CA-DELETE

California Delete Act and Data Broker Requirements

California Privacy Protection Agency

CPPA

California Privacy Rights Act and California Privacy Protection Agency provisions

California Privacy Protection Agency

CLOUD-ACT

Clarifying Lawful Overseas Use of Data Act (CLOUD Act)

United States Department of Justice

42-CFR-P2

Confidentiality of Substance Use Disorder Patient Records

U.S. Department of Health and Human Services, Office for Civil Rights

CAN-SPAM

Controlling the Assault of Non-Solicited Pornography And Marketing Act

Federal Trade Commission

CPNI

Customer Proprietary Network Information Rules

Federal Communications Commission

DPPA

Drivers Privacy Protection Act

United States Department of Justice and federal courts

ECPA-SCA

Electronic Communications Privacy Act and Stored Communications Act

United States Department of Justice

FERPA

Family Educational Rights and Privacy Act

U.S. Department of Education, Student Privacy Policy Office

GINA

Genetic Information Nondiscrimination Act

U.S. Equal Employment Opportunity Commission and federal health agencies

HITECH

Health Information Technology for Economic and Clinical Health Act

U.S. Department of Health and Human Services, Office for Civil Rights

HIPAA

Health Insurance Portability and Accountability Act of 1996

U.S. Department of Health and Human Services Office for Civil Rights

IL-BIPA

Illinois Biometric Information Privacy Act

Illinois Attorney General and private enforcement

MT-CDPA

Montana Consumer Data Privacy Act

Montana Attorney General, Office of Consumer Protection

NJDPA

New Jersey Data Privacy Law

New Jersey Attorney General and Division of Consumer Affairs

PRIVACY-ACT

Privacy Act of 1974

U.S. Department of Justice, Office of Privacy and Civil Liberties

RI-DTPPA

Rhode Island Data Transparency and Privacy Protection Act

Rhode Island Attorney General

UCPA

Utah Consumer Privacy Act

Utah Attorney General and Division of Consumer Protection

VT-DPOSA

Vermont Data Privacy and Online Surveillance Act

Vermont Attorney General

VPPA

Video Privacy Protection Act

United States Department of Justice and federal courts