The FTC can be compelled to disclose details of the data security standards it uses to pursue enforcement action against companies that suffer data breaches.