The problem: The FTC's first computer-security action targeted Eli Lilly in 2002 after the pharmaceutical firm sent an e-mail to more than 600 consumers who'd expressed interest in the antidepressant Prozac. The problem? The company listed all the recipients in a single, unmasked "To:" line, allowing every recipient to see the entire list of their fellow depressives.

The solution: Mass e-mails should be managed with considerable care. Combat phishing (fake e-mails designed to look as if they came from legitimate businesses) by requiring customers to visit your website to retrieve sensitive information. (Don't provide clickable URLs.) The Anti-Phishing Working Group, an industry coalition, maintains an updated list of the latest phishing techniques; check it frequently and adapt accordingly.