[UKBusinessLive]

My words exactly Wayne,

Heres a little i managed to find, Might be worth a read

Enforcement Actions

The FTC has used its authority under the FTC Act to take action against companies that have misrepresented their information management, security, and privacy practices. Under the FTC Act, the Commission can issue administrative cease and desist orders barring deceptive or unfair practices. If a respondent violates an administrative order, it can be held liable for a civil penalty of up to $11,000 for each violation, as well as such other equitable relief as is deemed appropriate. In appropriate cases, the FTC also can obtain preliminary and permanent injunctive relief from a federal court, barring deceptive or unfair practices and imposing equitable monetary relief (i.e., restitution and recision of contracts) to remedy past violations. The FTC also enforces other statutes, such as the COPPA and GLBA, and may seek injunctions and civil penalties for violations of those Acts (or their implementing regulations). Since 1999, the FTC has brought more than 30 cases involving the FTC Act and other privacy-related statutes. The following are just a few examples of these cases.

http://www.ftc.gov/speeches/swindle/...onprivacy.shtm