Following Equifax hack attack, more federal power to punish needed
“FTC lacks a practical enforcement tool for imposing civil money penalties that could help to deter companies, including CRAs (consumer reporting agencies), from violating data security provisions of [the law] and its implementing regulations,” the Government Accountability Office says.