The FTC could borrow from the European Union's legal framework for what personal data can be collected by companies. But