“Unfair practices” is a U.S. consumer-protection standard used by the Federal Trade Commission to address conduct that is likely to cause substantial consumer harm, especially when that harm is not reasonably avoidable and is not outweighed by countervailing benefits. It does not require a classic breach or malware event; a product, claim, or deployment choice can be examined if it creates preventable risk for users.
In cyber security, the standard matters when vendors market systems as safe, controlled, or resistant to abuse but fail to back those claims with testing, permissions, logging, or monitoring. For AI systems, unsafe tool access, weak prompt-injection defenses, or missing human approval for high-impact actions can turn a model into a workflow risk. Defenders use this framework to justify tighter controls, continuous monitoring, and clear disablement criteria. For attackers, it is a reminder that security gaps are not only technical flaws—they can also become regulatory exposure when they predictably harm consumers.