; and (B) notify the proper authorities. (d) Compliance Not less frequently than once every 2 years, the operator of a covered online platform shall audit the privacy or security program of the online platform. (e) Safe harbor Subsections (a), (b), and (c) shall not apply with respect to the development of privacy-enhancing technology by an operator of an online platform. 4. Enforcement (a) Enforcement by Commission (1) Unfair or deceptive acts or practices A violation of section 3 shall be treated as a violation of a rule defining an unfair or deceptive act or practice prescribed under section 18(a)(1)(B) of the Federal Trade Commission Act ( 15 U.S.C. 57a(a)(1)(B) ). (2) Powers of Commission (A) In general Except as provided in subparagraph (C), the Commission shall enforce this Act in the same manner, by the same means, and with the same jurisdiction, powers, and duties as though all applicable terms and provisions of the Federal Trade Commission Act ( 15 U.S.C. 41 et seq.) were incorporated into and made a part of this Act. (B) Privileges and immunities Except as provided in subparagraph (C), any person who violates this Act shall be subject to the penalties and entitled to the privileges and immunities provided in the Federal Trade Commission Act ( 15 U.S.C. 41 et seq.). (C) Common carriers and nonprofit organizations Notwithstanding section 4, 5(a)(2), or 6 of the Federal Trade Commission Act ( 15 U.S.C. 44 , 45(a)(2), 46) or any jurisdictional limitation of the Commission, the Commission shall also enforce this Act, in the same manner provided in subparagraphs (A) and (B) of this paragraph, with respect to— (i) common carriers subject to the Communications Act of 1934 ( 47 U.S.C. 151 et seq.) and Acts amendatory thereof and supplementary thereto