This would only make sense if abusing personal data were actually illegal. As it stands, the FTC maybe has the power to create a slight inconvenience for the legal department, and only if something goes really bad to the point of creating widespread demonstrable harm.