What 3 factors will the FTC consider in determining whether a data security practice is deceptive under Section 5 of the FTC Act?

A. 1) an unreasonable practice that is likely to confuse consumers; 2) examined from the perspective of a company acting reasonably in the circumstances; (3) the practice must be unexpected by others observing the consumers situation.

B. 1) a representation, admission, or practice that is likely to confuse the youngest consumer;

2) examined from the perspective of a consumer in the circumstances; (3) the representation, admission, or practice must be part of the businesss usual practice.

C. 1) a representation, omission, or practice that is likely to mislead the consumer; 2) examined from the perspective of a consumer acting reasonably in the circumstances; (3) the representation, omission, or practice must be material.

D. 1) any noticeable and intentional behavior that is likely to mislead the consumer; 2) examined from the perspective of a customer of that particular business in any circumstances; (3) intended to mislead the consumer.