The FTC will not hesitate to pursue companies that fail to implement reasonable security standards into their technology development cycle. This article reviews recent FTC settlements and offers in-house counsel and compliance officers some practical guidance on things to do to prevent an FTC investigation in their respective companies.