(c)(1) to be provided in a language in addition to English to individuals known to speak only such other language. (i) Education and outreach for small businesses The Commission shall conduct education and outreach for small business concerns on data security practices and how to prevent hacking and other unauthorized access to, acquisition of, or use of data maintained by such small business concerns. (j) Website on data security best practices The Commission shall establish and maintain an Internet website containing non-binding best practices for businesses regarding data security and how to prevent hacking and other unauthorized access to, acquisition of, or use of data maintained by such businesses. (k) General rulemaking authority (1) In general The Commission may promulgate regulations necessary under section 553 of title 5, United States Code, to effectively enforce the requirements of this section. (2) Limitation In promulgating rules under this Act, the Commission shall not require the deployment or use of any specific products or technologies, including any specific computer software or hardware. (l) Treatment of persons governed by other law A covered entity who is in compliance with any other Federal law that requires such covered entity to provide notification to individuals following a breach of security, shall be deemed to be in compliance with this section with respect to activities and information covered under such Federal law. 4. Application and enforcement (a) Enforcement by the federal Trade Commission (1) Unfair or deceptive acts or practices A violation of section 2 or 3 shall be treated as an unfair and deceptive act or practice in violation of a regulation under section 18(a)(1)(B) of the Federal Trade Commission Act ( 15 U.S.C. 57a(a)(1)(B) ) regarding unfair or deceptive acts or practices and shall be subject to enforcement by the Commission under that Act with respect to any covered entity. All of the functions and powers of the Commission under the Federal Trade Commission Act are