FTC complaint that Drizly’s lack of sufficient security practices coupled with the statements in its privacy policy were both unfair in violation of the FTC Act. The FTC said that Drizly could have prevented the 2020 breach by requiring regular review of access permissions.