In a highly anticipated decision (FTC v. Wyndham Worldwide), the Third Circuit confirmed on Monday that the Federal Trade Commission (FTC) has statutory authority under Section 5 of the FTC Act to bring enforcement actions against defendants for allegedly “unfair” data security practices. As we explain here, the decision will likely encourage the FTC to continue playing an aggressive role in regulating what it deems to be unreasonable data security practices.