In all, the burdensome provisions of the Magnuson-Moss rulemaking requirements are practically prohibitive, as indicated by the FTC in its testimony before a House of Representatives subcommittee in 2011.
Perhaps in addition to the Commission's unclear authority to act in this realm, has resulted in a complete void of data security rules by the Commission.