However, experts like Ashley Johnson, senior policy analyst at the Information Technology and Innovation Foundation, say the FTC isn't the right entity to make such rules. Instead, Johnson said a federal data privacy law passed by Congress would address much of the concerns about data privacy and provide businesses with more stable regulatory guidelines.
