Does The FTC’s Strategic Plan Give Enough Direction To Businesses On Privacy And Data Security?

The FTC’s new 2026–2030 Strategic Plan is a roadmap that explains the agency’s goals over the next five years. Currently, there are only two commissioners out of the intended five. Both commissioners voted in favor of this plan. While it is thus possible that the FTC’s plans may change as the roster of commissioners increases, the plan nevertheless is a helpful document for companies to review when designing their privacy and data security programs.

The plan outlines the FTC’s three goals, the first of which relates to privacy and data security. In explaining this first goal, which is to protect consumers from unfair or deceptive acts in the marketplace, the FTC lists several key program areas. This signal for companies what the FTC may focus on in the coming months – and years. These include (1) fighting deception and “high‑dollar harm;” (2) addressing “unlawful conduct” relating to privacy and data security; (3) holding BigTech “accountable” for actions that result in harm to