Summary: 1914 law allows the Federal Trade Commission to fine a business if it exposes consumers' personal data