The Federal Trade Commission (FTC), which is the primary federal regulator of most companies data privacy and security practices, has conducted more than 60 privacy and security-related enforcement actions in the last 15 years. David Zetoony and Josh James discuss what to expect and how to respond to a FTC investigation into a company's data privacy and data security practices.