Internet website would be in the public interest, the Commission shall place such a notification in a clear and conspicuous location on its Internet website. (h) Website notification of state attorneys general If a State attorney general, upon receiving notification of any breach of security that is reported to such State attorney general under subsection (d)(6), finds that notification of such breach of security via the State attorney general’s Internet website would be in the public interest or for the protection of consumers, the State attorney general may place such a notification in a clear and conspicuous location on its Internet website. (i) FTC study on notification in languages in addition to English Not later than 1 year after the date of enactment of this Act, the Commission shall conduct a study on the practicality and cost effectiveness of requiring the notification required by subsection (c)(1) to be provided in a language in addition to English to individuals known to speak only such other language. (j) Education and outreach for small businesses The Commission shall conduct education and outreach for small business concerns on data security practices and how to prevent hacking and other unauthorized access to, acquisition of, or use of data maintained by such small business concerns. (k) Website on data security best practices The Commission shall maintain an Internet website containing nonbinding best practices for businesses regarding data security and how to prevent hacking and other unauthorized access to, acquisition of, or use of data maintained by such businesses. (l) General rulemaking authority (1) In general The Commission may promulgate regulations necessary under section 553 of title 5, United States Code, to effectively enforce the requirements of this section. (2) Limitation In promulgating rules under this Act, the Commission shall not require the deployment or use of any specific products or technologies, including any specific computer software or hardware. (m) Treatment of