Section 5 is the part of the U.S. Federal Trade Commission Act that lets the FTC challenge unfair or deceptive acts or practices in commerce. In practice, it is a broad consumer-protection authority that can apply when a company’s claims do not match how a product actually behaves, or when a business practice creates unreasonable harm that users cannot easily avoid.
In cyber security, Section 5 matters because security and AI claims are often part of product marketing and operational trust. If a vendor says a system is safe, private, or controlled, regulators may expect evidence such as testing records, logging, access limits, and internal governance. The same logic applies to agentic systems that can browse, click, or call tools: weak permissions, poor confirmation flows, and missing audit trails can turn a technical flaw into a legal risk. For defenders, Section 5 encourages accurate claims, least-privilege design, and documented controls.