The FTC's 5-Year Plan Reads Like a Marketing Audit. Most Teams Won't Notice.

The FTC spent two weeks telling everyone it was going to stop burdening legitimate business. Chairman Andrew Ferguson restored the phrase "without unduly burdening legitimate business activity" to the agency's mission statement and framed the whole rewrite as a course correction from overregulation. Then on April 3 the commission published its five-year strategic plan, and if you read the actual document instead of the press release, most of what marketing teams should be watching is still sitting on the priority list. The vote to approve was 2-0.

I keep seeing marketers treat the FTC like a courtroom drama they're not in. Antitrust headlines against Meta and Amazon get most of the attention. The boring stuff, telemarketing enforcement, subscription trap settlements, COPPA updates, search ad pricing investigations, is the actual budget liability. The new plan names all of it.

The softer language is aimed at the wrong audience

The phrase "without unduly burdening legitimate business activity" is back in the mission statement. Ferguson said it reflects a commitment to "end overregulation of American businesses that compete fairly and deal honestly with consumers." That sentence is doing a very specific job. It's reassuring large, compliant corporations. It's not reassuring anyone running aggressive autorenewals, influencer marketing with shaky disclosures, or a growth loop that depends on collecting data from users whose age nobody has actually verified.

The three strategic goals are consumer protection, antitrust enforcement, and operational efficiency. Same framework as the last plan. Privacy and data security is kept as a standalone enforcement priority, not folded into something softer. Fox Rothschild's privacy practice is being pretty direct about what that means in its reading of the plan: reports of the death of FTC privacy enforcement have been, their words, greatly exaggerated. I'd trust that reading over any press release.

The part most marketers skip is the budget. The FY 2027 request is $426.71 million with 1,183 full-time equivalents, slightly above the FY 2025 baseline. An agency that's going to stop enforcing doesn't usually ask Congress for a bigger check.

Instacart already paid $60 million for the dark pattern demo

On December 18, 2025, Instacart settled with the FTC for $60 million over hidden fees and forced subscriptions. The FTC's complaint alleged Instacart advertised "free delivery" on first orders while charging mandatory service fees that added as much as 15% to order costs, and that hundreds of thousands of consumers were charged membership fees without receiving benefits or refunds. The consent order runs for ten years. Instacart denied wrongdoing on the way out the door, which is what you say when you write the check anyway.

I think most teams saw the headline number and moved on. The interesting part is that the settlement now sits inside the strategic plan as a template, not a one-off. If your marketing funnel includes any of the following, you are operating inside an enforcement pattern the FTC has publicly committed to for the next five years:

• A checkout flow where fees appear only at the final step
• An autorenewal that reactivates after a cancellation attempt
• A free trial whose charge date is buried in body copy nobody reads
• A "continue" button styled differently from a "skip" button pointing to the cheaper version
• A satisfaction guarantee that quietly delivers store credit instead of actual refunds

The Benesch Law team has been tracking this enforcement trend and their view is that subscription and negative option work is the most likely place an ordinary consumer brand ends up in an FTC investigation. Not because anyone chose them specifically. Because automated tools flag the pattern and staff follow up.

The plan also names the Office of Technology as a Goal Leader for consumer protection for the first time. The agency is measuring how often its tech lab identifies enforcement targets directly. Translated, they're automating the intake. The cost of opening an investigation is getting cheaper on their side, which means the bar for being "too small to notice" is rising on ours.

COPPA is now a five-year institutional priority

Children's privacy got the most explicit new language in the plan. Ferguson called COPPA enforcement "one of the most important consumer protection issues of our time." That phrasing matters because it's load-bearing. When a chairman calls something one of the most important issues of our time, staff plan accordingly.

What's already on the record from the last twelve months:

• New COPPA rule amendments took effect June 23, 2025, limiting how companies can monetize children's data and requiring separate verifiable consent for targeted advertising use
• In February 2026, the commission issued an enforcement policy statement on age-verification technology
• In September 2025, seven AI chatbot companies received orders requiring child safety reports
• The Take It Down Act, signed in 2025, gives the FTC new authority over nonconsensual intimate deepfakes and platform takedown obligations

If your audience includes anyone under 13, or you're running an AI product that might plausibly end up in front of a minor, the plan says your compliance position just got more expensive to hold. "Plausibly" is doing a lot of work in that sentence. The seven AI chatbot orders from last September included companies that hadn't explicitly positioned themselves as kids' platforms. Intent didn't protect them. What the tool could reach did.

The Amazon and Google search ad investigation is a warning shot

Inside the enforcement context is the September 12, 2025 investigation into Amazon and Google over search ad pricing disclosures, which PPC Land's summary flags as still active in the new plan. I'll be honest, I don't know how this one ends. It could turn into nothing or it could redefine how the two largest search ad platforms display pricing to advertisers. The plan references it as an ongoing priority, which means the agency isn't letting it die quietly.

If you're spending real money on Google Ads or Amazon Sponsored Products, keep a bookmark on this case. Any consent decree requiring more granular disclosure would change how benchmarks work overnight. I wouldn't build a 2027 budget around the current disclosure format without at least acknowledging the tail risk.

The Amazon and Google investigation also tells you something about the FTC's posture on what platforms show advertisers about their own auctions. Earlier this year Bing was quietly removing visual ad labels in a UX test, and that move was already attracting regulatory attention. If you're relying on the platform's numbers to defend a campaign, those numbers are now part of a live enforcement question.

What to pull before your next budget review

Three things, none of them more than an afternoon of work.

First, walk your checkout flow as a new user would. If you hit any moment where price, fees, or billing terms aren't clear at or before the step where a user commits, flag it for legal or compliance. If you don't have a legal or compliance lead, ask your CFO who handles it. The goal isn't to rebuild the flow this week. The goal is to have a written record that someone senior reviewed it this month, because that record is the difference between a $60 million story and a memo.

Second, audit any product, newsletter, or community that might have users under 13. You don't need to turn the whole product upside down. You need to know whether you have a verifiable parental consent process where the COPPA rule requires one. If the answer is "I don't know," that is the finding you need to act on. Write it down and assign it.

Third, if you spend more than $500,000 a year on Google Ads or Amazon Sponsored Products, put a recurring calendar reminder on the next FTC search ad pricing investigation update. It's cheap insurance. You don't want to be the team that heard about a consent decree from your VP six weeks after it landed, after the platform quietly adjusted reporting without telling anyone why.

The five-year cost of not reading the plan

From what I've seen, most marketing leaders don't track FTC activity at all. They track platform updates. They track court rulings, but only when a ruling affects ad accounts. The FTC feels like someone else's job, so the quarterly update never makes it into a team meeting. That gap is where the budget liability hides. A $60 million settlement isn't a headline inside Instacart's marketing team. It's a line item that reshaped their roadmap for a year and is still sitting inside a ten-year consent order.

The plan is public. It's not subtle. The agency that's supposedly stepping back is asking for a bigger budget, naming explicit enforcement priorities, automating its detection pipeline, and using Instacart as a teaching example. The rhetoric is softer than the docket. That's probably the only thing about this plan I'd feel comfortable guaranteeing for the full five years.

Notice Me Senpai Editorial