A look at the hurdles the FTC faces in strengthening online privacy, including budgetary constraints, personnel changes, and potential legal pushback
David Uberti / Wall Street Journal :
Context & Ripple Effects
The FTC has been building toward a privacy rulemaking for years: chairman Joseph Simons publicly sought direct authority to oversee privacy practices and fine companies, and by late September 2021 sources said the agency was weighing stronger protections, including for children, as a way around Congress's legislative logjam. The obstacle underneath all of it is capacity — an internal memo had already directed the agency to cut costs, freeze hiring, and lower IT spending even as lawmakers pushed it to act faster against Big Tech.
First-order effects
- The FTC's own staff and budget are the immediate constraint: with hiring frozen and costs being cut per the executive director's memo, any rulemaking team assembled for the privacy docket competes with existing enforcement work for scarce personnel.
- Personnel changes at the top mean the strategy laid out under Simons — direct oversight authority plus fining power — may be re-scoped or slowed before rules are even proposed.
Second-order effects
- Companies under scrutiny gain a timing argument: if the consultation process takes years and faces legal challenge, platforms can defer costly compliance changes while the rules' enforceability is contested in court.
- A weakened or delayed federal effort shifts pressure toward state legislatures and sector-specific enforcers, fragmenting the compliance landscape the FTC was trying to unify.
Third-order effects
- If the pattern holds, US online privacy regulation settles into a two-track system: ambitious federal rules that arrive slowly through contested agency rulemaking, and faster, patchier state laws filling the gap — with the FTC's budget cycle, set by Congress, effectively setting the pace of national privacy protection.
The trend: US privacy regulation is migrating from stalled legislation to FTC rulemaking, making the agency's funding and staffing — not congressional intent — the binding constraint on how fast national privacy rules arrive.